Jackson Release 2.13.4

Jump to bottom

Tatu Saloranta edited this page Oct 6, 2022 · 13 revisions

Patch version of 2.13, released on September 3, 2022.

Following fixes are included in this patch release.

Changes, core

Databind

#3275: JDK 16 Illegal reflective access for Throwable.setCause() with PropertyNamingStrategy.UPPER_CAMEL_CASE
#3565: Arrays.asList() value deserialization has changed from mutable to immutable in 2.13
#3582: Add check in BeanDeserializer._deserializeFromArray() to prevent use of deeply nested arrays [CVE-2022-42004]

Changes, data formats

XML

#536: Upgrade Woodstox to 6.3.1 to get OSGi metadata

YAML

#329: Update to SnakeYAML 1.31

Changes, datatypes

Collections

#94: Eclipse Collection serialization for Pairs does not work when upgrading to EC version 11.0.0

Changes, Other modules

Jakarta XmlBind

#175: jackson-module-jakarta-xmlbind-annotations should use a Jakarta namespaced Activation API

Changes, JVM Languages

Kotlin

#556: Broken Kotlin 1.4 support in 2.13.2

Scala

#588: support immutable ArraySeq deserialization
#599: ScalaAnnotationIntrospectorModule.registerReferencedValueType didn't work properly when fields have default value