Skip to content

Jackson Release 2.6.7.x

Tatu Saloranta edited this page Jul 11, 2017 · 17 revisions

After last full version of 2.6 -- 2.6.7 -- was released, branch was closed. However, following micro-patches have been released since.

Databind, 2.6.7.1 (11-Jul-2017)

An important security fix (see 1599 below) was backported into 2.6.x branch, resulting in patch version with following fixes:

  • #1383: Problem with @JsonCreator with 1-arg factory-method, implicit param names
  • #1599: Backport the extra safety checks for polymorphic deserialization
Clone this wiki locally