diff --git a/pom.xml b/pom.xml index e6faeead22..0813ff7dd4 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ com.fasterxml.jackson jackson-base - 2.9.10.20200103 + 2.9.10.20200223 com.fasterxml.jackson.core diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index 6f1d5ba36c..3507a7669a 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -4,7 +4,7 @@ Project: jackson-databind === Releases === ------------------------------------------------------------------------ -2.9.10.3 (not released yet) +2.9.10.3 (23-Feb-2020) #2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840) (reported by threedr3am@github)