Merge pull request #170 from bugsnag/tom/bump-jackson-2.9.x-dep

[PLAT-7255] bump jackson dep from 2.9.1 to latest stable
bugsnag · Oct 11, 2021 · 52720c0 · 52720c0
2 parents 81abe4c + c1a92cd
commit 52720c0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## TBD
+
+* Bump Jackson from 2.9.1 for critical vulnerability fixes
+  [#170](https://github.com/bugsnag/bugsnag-java/pull/170)
+
 ## 3.6.2 (2020-11-10)
 
 * Fix JVM hang when System.exit or bugsnag.close is not called

diff --git a/bugsnag/build.gradle b/bugsnag/build.gradle
@@ -10,7 +10,7 @@ repositories {
 }
 
 dependencies {
-    compile "com.fasterxml.jackson.core:jackson-databind:2.9.1"
+    compile "com.fasterxml.jackson.core:jackson-databind:2.12.5"
     compile "org.slf4j:slf4j-api:1.7.25"
     compileOnly "javax.servlet:javax.servlet-api:${servletApiVersion}"
     compileOnly("ch.qos.logback:logback-classic:${logbackVersion}") {