Skip to content

Commit 182f560

Browse files
Upgrade jackson-databind to 2.13.4.2 (#6336)
1 parent 059e065 commit 182f560

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ For information on changes in released versions of Teku, see the [releases page]
2121

2222
### Additions and Improvements
2323
- Enabled new framework for REST API with better performance and less memory usage. The new framework does not cause any breaking changes, however if needed the old version can be restored with `--Xrest-api-migrated-enabled=false`
24+
- Updated jackson-databind library to version 2.13.4.2 addressing [CVE-2022-42003](https://nvd.nist.gov/vuln/detail/CVE-2022-42003)
2425

2526
### Bug Fixes
2627
- Fix issue where /readiness endpoint returned 200 when Execution Client was not available.

gradle/versions.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
dependencyManagement {
22
dependencies {
3-
dependency 'com.fasterxml.jackson.core:jackson-databind:2.13.4'
3+
dependency 'com.fasterxml.jackson.core:jackson-databind:2.13.4.2'
44
dependency 'com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.13.4'
55
dependency 'com.fasterxml.jackson.dataformat:jackson-dataformat-toml:2.13.4'
66
dependency 'com.fasterxml.jackson.module:jackson-module-kotlin:2.13.4'

0 commit comments

Comments
 (0)