From 06a67f73d8e81b309c2cd27ea3fed672b97ec9c2 Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Sun, 26 Apr 2020 09:51:00 -0700 Subject: update release notes --- release-notes/VERSION-2.x | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'release-notes/VERSION-2.x') diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index 558ef5bb4..bcf076409 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -229,7 +229,7 @@ Project: jackson-databind (reported by Alexander S) #1854: NPE deserializing collection with `@JsonCreator` and `ACCEPT_CASE_INSENSITIVE_PROPERTIES` (reported by rue-jw@github) -#1855: Blacklist for more serialization gadgets (dbcp/tomcat, spring) +#1855: Blacklist for more serialization gadgets (dbcp/tomcat, spring, CVE-2017-17485) #1859: Issue handling unknown/unmapped Enum keys (reported by remya11@github) #1868: Class name handling for JDK unmodifiable Collection types changed -- cgit v1.2.3