| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: jackson-databind | Distribution: openSUSE Tumbleweed |
| Version: 2.18.9 | Vendor: openSUSE |
| Release: 2.2 | Build date: Wed Jul 15 17:02:53 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 1914672 | Source RPM: jackson-databind-2.18.9-2.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/FasterXML/jackson-databind/ | |
| Summary: General data-binding package for Jackson (2.x) | |
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
Apache-2.0
* Wed Jul 15 2026 Fridrich Strba <fstrba@suse.com>
- Update to 2.18.9
* Changes
+ #5962: Case-insensitive deserialization may use wrong
'@JsonIgnoreProperties' (bsc#1268902, CVE-2026-54515)
+ #6054: Honor '@JsonView' for external-type-id
('EXTERNAL_PROPERTY') properties [GHSA-mhm7-754m-9p8w]
+ #6058: Do not allow DNS resolution when deserializing
'InetAddress'
+ #6060: '@JsonView' by-passed for '@JsonUnwrapped'
Field/Setter properties (bsc#1271440, CVE-2026-59889)
- Removed patch
* jackson-databind-CVE-2026-54515.patch
+ integrated in this version
* Thu Jun 25 2026 Fridrich Strba <fstrba@suse.com>
- Update to 2.18.8
* Changes of 2.18.8
+ #5950: Improve 'UUIDeserializer' error handling
+ #5951: Improve 'InetSocketAddress' deserialization
(bsc#1268899, CVE-2026-54514)
+ #5969: '@JsonView' by-passed for some "setterless" creator
properties
+ #5971: '@JsonView' by-passed for unwrapped creator parameters
+ #5974: '@JsonIgnore' on Record property ignored with
'PropertyNamingStrategy' (bsc#1271442, CVE-2026-59888)
+ #5981: 'BasicPolymorphicTypeValidator' setting
'allowIfSubTypeIsArray()' should validate element type
(bsc#1268898, CVE-2026-54513)
+ #5988: 'PolymorphicTypeValidator' needs to validate generic
type parameters too (bsc#1268897, CVE-2026-54512)
+ #5993: 'UPPER_SNAKE_CASE' / 'LOWER_CASE' 'NamingStrategyImpls'
fold case using JVM default locale (Turkish-I bug)
* Changes of 2.18.4
+ #4628: '@JsonIgnore' and '@JsonProperty.access=READ_ONLY' on
Record property ignored for deserialization
+ #5049: Duplicate creator property "b" (index 0 vs 1) on simple
java record
* Changes of 2.18.3
+ #4444: The 'KeyDeserializer' specified in the class with
'@JsonDeserialize(keyUsing = ...)' is overwritten by the
'KeyDeserializer' specified in the 'ObjectMapper'.
+ #4827: Subclassed Throwable deserialization fails since
v2.18.0 - no creator index for property 'cause'
+ #4844: Fix wrapped array handling wrt 'null' by
'StdDeserializer'
+ #4848: Avoid type pollution in 'StringCollectionDeserializer'
+ #4860: 'ConstructorDetector.USE_PROPERTIES_BASED' does not
work with multiple constructors since 2.18
+ #4878: When serializing a Map via
Converter(StdDelegatingSerializer), a NullPointerException is
thrown due to missing key serializer
+ #4908: Deserialization behavior change with @JsonCreator and
@ConstructorProperties between 2.17 and 2.18
+ #4917: 'BigDecimal' deserialization issue when using
'@JsonCreator'
+ #4920: Creator properties are ignored on abstract types when
collecting bean properties, breaking AsExternalTypeDeserializer
+ #4922: Failing '@JsonMerge' with a custom Map
+ #4932: Conversion of 'MissingNode' throws
'JsonProcessingException'
* Changes of 2.18.2
+ #4733: Wrong serialization of Type Ids for certain types of
Enum values
+ #4742: Deserialization with Builder, External type id,
'@JsonCreator' failing
+ #4777: 'StdValueInstantiator.withArgsCreator' is now set for
creators with no arguments
+ #4783 Possibly wrong behavior of @JsonMerge
+ #4787: Wrong 'String.format()' in 'StdDelegatingDeserializer' * jackson-databind-CVE-2026-54515.patch
hides actual error
+ #4788: 'EnumFeature.WRITE_ENUMS_TO_LOWERCASE' overrides
'@JsonProperty' values
+ #4790: Fix '@JsonAnySetter' issue with "setter" method
(related to #4639)
+ #4807: Improve 'FactoryBasedEnumDeserializer' to work better
with XML module
+ #4810: Deserialization using '@JsonCreator' with renamed
property failing (since 2.18)
* Changes of 2.18.1
+ #4508: Deserialized JsonAnySetter field in Kotlin data class
is null
+ #4639: @JsonAnySetter on field ignoring unrecognized
properties if they are declared before the last recognized
properties in JSON
+ #4718: Should not fail on trying to serialize
'java.time.DateTimeException'
+ #4724: Deserialization behavior change with Records,
'@JsonCreator' and '@JsonValue' between 2.17 and 2.18
+ #4727: Eclipse having issues due'module-info' class "lost" on
2.18.0 jars
+ #4741: When 'Include.NON_DEFAULT' setting is used on POJO,
empty values are not included in json if default is 'null'
+ #4749: Fixed a problem with
'StdDelegatingSerializer#serializeWithType' looking up the
serializer with the wrong argument
* Changes of 2.18.0
+ #562: Allow '@JsonAnySetter' to flow through Creators
+ #806: Problem with 'NamingStrategy', creator methods with
implicit names
+ #2977: Incompatible 'FAIL_ON_MISSING_PRIMITIVE_PROPERTIES' and
field level '@JsonProperty'
+ #3120: Return 'ListIterator' from 'ArrayNode.elements()'
+ #3241: 'constructorDetector' seems to invalidate
'defaultSetterInfo' for nullability
+ #3439: Java Record '@JsonAnySetter' value is null after
deserialization
+ #4085: '@JsonView' does not work on class-level for records
+ #4119: Exception when deserialization uses a record with a
constructor property with 'access=READ_ONLY'
+ #4356: 'BeanDeserializerModifier::updateBuilder()' doesn't
work for beans with Creator methods
+ #4407: 'null' type id handling does not work with
'writeTypePrefix()'
+ #4452: '@JsonProperty' not serializing field names properly on
'@JsonCreator' in Record
+ #4453: Allow JSON Integer to deserialize into a single-arg
constructor of parameter type 'double'
+ #4456: Rework locking in 'DeserializerCache'
+ #4458: Rework synchronized block from 'BeanDeserializerBase'
+ #4464: When 'Include.NON_DEFAULT' setting is used, 'isEmpty()'
method is not called on the serializer
+ #4472: Rework synchronized block in 'TypeDeserializerBase'
+ #4483: Remove 'final' on method BeanSerializer.serialize()
+ #4515: Rewrite Bean Property Introspection logic in Jackson
2.x
+ #4545: Unexpected deserialization behavior with
'@JsonCreator', '@JsonProperty' and javac '-parameters'
+ #4570: Deprecate 'ObjectMapper.canDeserialize()'/'ObjectMapper
.canSerialize()'
+ #4580: Add 'MapperFeature
.SORT_CREATOR_PROPERTIES_BY_DECLARATION_ORDER' to use Creator
properties' declaration order for sorting
+ #4584: Provide extension point for detecting "primary"
Constructor for Kotlin (and similar) data classes
+ #4602: Possible wrong use of _arrayDelegateDeserializer in
BeanDeserializerBase::deserializeFromObjectUsingNonDefault()
+ #4617: Record property serialization order not preserved
+ #4626: '@JsonIgnore' on Record property ignored for
deserialization, if there is getter override
+ #4630: '@JsonIncludeProperties', '@JsonIgnoreProperties'
ignored when serializing Records, if there is getter override
+ #4634: '@JsonAnySetter' not working when annotated on both
constructor parameter & field
+ #4678: Java records don't serialize with 'MapperFeature
.REQUIRE_SETTERS_FOR_GETTERS'
+ #4688: Should allow deserializing with no-arg
'@JsonCreator(mode = DELEGATING)'
+ #4694: Deserializing 'BigDecimal' with large number of
decimals result in incorrect value
+ #4699: Add extra 'writeNumber()' method in 'TokenBuffer'
+ #4709: Add 'JacksonCollectors' with 'toArrayNode()'
implementation
- Added patch:
* jackson-databind-CVE-2026-54515.patch
+ Fix #5962: Case-insensitive deserialization may use wrong
@JsonIgnoreProperties (bsc#1268902, CVE-2026-54515)
* Mon Jun 23 2025 Fridrich Strba <fstrba@suse.com>
- Fix "Not fully interpolated version" error with Maven 4
* Wed Nov 06 2024 Fridrich Strba <fstrba@suse.com>
- Update to 2.17.3
* #4718: Should not fail on trying to serialize
'java.time.DateTimeException'
* Mon Oct 28 2024 Fridrich Strba <fstrba@suse.com>
- Remove LGPL-2.1-or-later license, since not found in the package
* Thu Oct 10 2024 Fridrich Strba <fstrba@suse.com>
- Build the module-info.java source too (with release=9)
* Wed Aug 07 2024 Fridrich Strba <fstrba@suse.com>
- Update to 2.17.2
* #4561: Issues using jackson-databind 2.17.1 with Reactor
* #4575: StdDelegatingSerializer does not consider a Converter
that may return null for a non-null input
* #4577: Cannot deserialize value of type 'java.math.BigDecimal'
from String "3." (not a valid representation)
* #4595: No way to explicitly disable wrapping in custom
annotation processor
* #4607: 'MismatchedInput': No Object Id found for an instance of
X to assign to property '@id'
* #4610: 'DeserializationFeature.FAIL_ON_UNRESOLVED_OBJECT_IDS'
does not work when used with Polymorphic type handling
* Mon May 20 2024 Gus Kenion <gus.kenion@suse.com>
- Update to 2.17.1
* 2.17.1 (04-May-2024)
+ #4428: 'ByteBuddy' scope went beyond 'test' in version 2.17.0
+ #4430: Use 'ReentrantLock' instead of 'synchronized' in
'DeserializerCache' to avoid deadlock on pinning
+ #4435: Cannot deserialize value of type 'java.math.BigDecimal'
from String ".05": not a valid representation
+ #4441: '@JsonSetter(nulls = Nulls.SKIP)' doesn't work in some
situations
+ #4450: Empty QName deserialized as 'null'
+ #4471: Reconsider deprecation of
'JsonNode.asText(defaultValue)'
+ #4481: Unable to override
'DeserializationFeature.READ_UNKNOWN_ENUM_VALUES_AS_NULL' with
'JsonFormat.Feature.READ_UNKNOWN_ENUM_VALUES_AS_NULL'
+ #4489: Unable to override 'DeserializationFeature
.READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE' with
'JsonFormat.Feature.READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE'
* 2.17.0 (12-Mar-2024)
+ #437: Support throwing 'MismatchedInputException' when
deserializing properties that are not part of the view
+ #736: 'MapperFeature.REQUIRE_SETTERS_FOR_GETTERS' has no effect
+ #2543: Introspection includes delegating ctor's only parameter
as a property in 'BeanDescription'
+ #4160: Deprecate 'DefaultTyping.EVERYTHING' in '2.x' and
remove in '3.0'
+ #4194: Add 'JsonNodeFeature
.FAIL_ON_NAN_TO_BIG_DECIMAL_COERCION' option to fail on
attempting to coerce 'NaN' into 'BigDecimal'
+ #4205: Consider types in 'sun.*' package(s) to be JDK
(platform) types for purposes of handling
+ #4209: Make 'BeanDeserializerModifier'/'BeanSerializerModifier'
implement 'java.io.Serializable'
+ #4214: 'EnumSet' deserialization does not work when we
activate default typing in 'ObjectMapper'
+ #4248: 'ThrowableDeserializer' does not handle 'null' well for
'cause'
+ #4250: Add input validation for 'NumberDeserializers'
deserializers for "stringified" FP numbers
+ #4262: Improve handling of 'null' insertion failure for
'TreeSet'
+ #4263: Change 'ObjectArrayDeserializer' to use "generic" type
parameter ('java.lang.Object') to remove co-variant return
type
+ #4299: Some 'Collection' and 'Map' fallbacks don't work in
GraalVM native image
+ #4309: '@JsonSetter(nulls=...)' handling of 'Collection'
'null' values during deserialization with
'READ_UNKNOWN_ENUM_VALUES_AS_NULL' and
'FAIL_ON_INVALID_SUBTYPE' wrong
+ #4327: '@JsonAlias' not respected by polymorphic deduction
+ #4337: 'AtomicReference' serializer does not support
'@JsonSerialize(contentConverter=...)'
+ #4364: '@JsonProperty' and equivalents should merge with
'AnnotationIntrospectorPair'
+ #4394: Better Base64 support for 'java.util.UUIDs' without
padding
+ #4403: Deserialization of unknown value for enums does not
yield default enum value
+ #4416: Deprecate 'JsonNode.asText(String)'
* 2.16.2 (09-Mar-2024)
+ #4302: Problem deserializing some type of Enums when using
'PropertyNamingStrategy'
+ #4303: 'ObjectReader' is not serializable if it's configured
for polymorphism
+ #4316: NPE when deserializing 'JsonAnySetter' in 'Throwable'
+ #4355: Jackson 2.16 fails attempting to obtain 'ObjectWriter'
for an 'Enum' of which some value returns null from
'toString()'
+ #4409: Deserialization of enums with name defined with
different cases leads to 'InvalidDefinitionException':
Multiple fields representing property
* Fri Mar 08 2024 Gus Kenion <gkenion@suse.com>
- Update to 2.16.1
* 2.16.1 (24-Dec-2023)
+ #4200: JsonSetter(contentNulls = FAIL) is ignored in
delegating @JsonCreator argument
+ #4216: Primitive array deserializer not being captured by
DeserializerModifier
+ #4219: JsonNode.findValues() and findParents() missing
expected values in 2.16.0
* 2.16.0 (15-Nov-2023)
+ #1770: Incorrect deserialization for BigDecimal numbers
+ #2502: Add a way to configure caches Jackson uses
+ #2787: Mix-ins do not work for Enums
+ #3133: Map deserialization results in different numeric
classes based on json ordering (BigDecimal / Double) when
used in combination with @JsonSubTypes
+ #3251: Generic class with generic field of runtime type
Double is deserialized as BigDecimal when used with
@JsonTypeInfo and JsonTypeInfo.As.EXISTING_PROPERTY
+ #3277: Combination of @JsonUnwrapped and @JsonAnySetter
results in BigDecimal instead of Double
+ #3647: @JsonIgnoreProperties not working with @JsonValue
+ #3780: Deprecated JsonNode.with(String) suggests using
JsonNode.withObject(String) but it is not the same thing
+ #3838: Difference in the handling of ObjectId-property in
JsonIdentityInfo depending on the deserialization route
+ #3877: Add new OptBoolean valued property in @JsonTypeInfo,
handling, to allow per-polymorphic type loose Type Id
handling
+ #3906: Regression: 2.15.0 breaks deserialization for records
when
mapper.setVisibility(PropertyAccessor.ALL, Visibility.NONE)
+ #3924: Incorrect target type when disabling coercion, trying
to deserialize String from Array/Object
+ #3928: @JsonProperty on constructor parameter changes default
field serialization order
+ #3950: Create new JavaType subtype IterationType
(extending SimpleType)
+ #3953: Use JsonTypeInfo.Value for annotation handling
+ #3965: Add JsonNodeFeature.WRITE_PROPERTIES_SORTED for
sorting ObjectNode properties on serialization
(for Canonical JSON)
+ #4008: Optimize ObjectNode findValue(s) and findParent(s)
fast paths
+ #4009: Locale "" is deserialised as null if
ACCEPT_EMPTY_STRING_AS_NULL_OBJECT is enabled
+ #4011: Add guardrail setting for TypeParser handling of type
parameters
+ #4036: Use @JsonProperty for Enum values also when READ_ENUMS
USING_TO_STRING enabled
+ #4037: Fix Enum deserialization to use @JsonProperty,
@JsonAlias even if EnumNamingStrategy used
+ #4039: Use @JsonProperty and lowercase feature when
serializing Enums despite using toString()
+ #4040: Use @JsonProperty over EnumNamingStrategy for Enum
serialization
+ #4041: Actually cache EnumValues#internalMap
+ #4047: ObjectMapper.valueToTree() will ignore the
configuration SerializationFeature.WRAP_ROOT_VALUE
+ #4056: Provide the "ObjectMapper.treeToValue(TreeNode,
TypeReference)" method
+ #4060: Expose NativeImageUtil.isRunningInNativeImage() method
+ #4061: Add JsonTypeInfo.Id.SIMPLE_NAME which defaults type id
to Class.getSimpleName()
+ #4071: Impossible to deserialize custom Throwable sub-classes
that do not have single-String constructors
+ #4078: java.desktop module is no longer optional
+ #4082: ClassUtil fails with
java.lang.reflect.InaccessibleObjectException trying to
setAccessible on OptionalInt with JDK 17+
+ #4090: Support sequenced collections (JDK 21)
+ #4095: Add withObjectProperty(String),
withArrayProperty(String) in JsonNode
+ #4096: Change JsonNode.withObject(String) to work similar to
withArray() wrt argument
+ #4144: Log WARN if deprecated subclasses of
PropertyNamingStrategy is used
+ #4145: NPE when transforming a tree to a model class object,
at ArrayNode.elements()
+ #4153: Deprecated ObjectReader.withType(Type) has no direct
replacement; need forType(Type)
+ #4159: Add new DefaultTyping.NON_FINAL_AND_ENUMS to allow
Default Typing for Enums
+ #4164: Do not rewind position when serializing direct
ByteBuffer
+ #4175: Exception when deserialization of private record with
default constructor
+ #4184: BeanDeserializer updates currentValue incorrectly when
deserialising empty Object
* Mon Aug 21 2023 Fridrich Strba <fstrba@suse.com>
- Update to 2.15.2
* 2.15.2 (30-May-2023)
+ #3938: Record setter not included from interface
(2.15 regression)
* 2.15.1 (16-May-2023)
+ #3882: Error in creating nested 'ArrayNode's with
'JsonNode.withArray()'
+ #3894: Only avoid Records fields detection for deserialization
+ #3895: 2.15.0 breaking behaviour change for records and Getter
Visibility
+ #3897: 2.15.0 breaks deserialization when POJO/Record only has
a single field and is marked 'Access.WRITE_ONLY'
+ #3913: Issue with deserialization when there are unexpected
properties (due to null 'StreamReadConstraints')
+ #3914: Fix TypeId serialization for
'JsonTypeInfo.Id.DEDUCTION', native type ids
* 2.15.0 (23-Apr-2023)
+ #2536: Add 'EnumFeature.READ_ENUM_KEYS_USING_INDEX' to work
with existing "WRITE_ENUM_KEYS_USING_INDEX"#
+ #2667: Add '@EnumNaming', 'EnumNamingStrategy' to allow use of
naming strategies for Enums
+ #2968: Deserialization of '@JsonTypeInfo' annotated type fails
with missing type id even for explicit concrete subtypes
+ #2974: Null coercion with '@JsonSetter' does not work with
'java.lang.Record'
+ #2992: Properties naming strategy do not work with Record
+ #3053: Allow serializing enums to lowercase
('EnumFeature.WRITE_ENUMS_TO_LOWERCASE')
+ #3180: Support '@JsonCreator' annotation on record classes
+ #3262: InvalidDefinitionException when calling
mapper.createObjectNode().putPOJO
+ #3297: '@JsonDeserialize(converter = ...)' does not work with
Records
+ #3342: 'JsonTypeInfo.As.EXTERNAL_PROPERTY' does not work with
record wrappers
+ #3352: Do not require the usage of opens in a modular app when
using records
+ #3566: Cannot use both 'JsonCreator.Mode.DELEGATING' and
'JsonCreator.Mode.PROPERTIES' static creator factory methods
for Enums
+ #3637: Add enum features into '@JsonFormat.Feature'
+ #3638: Case-insensitive and number-based enum deserialization
are (unnecessarily) mutually exclusive
+ #3651: Deprecate "exact values" setting from 'JsonNodeFactory',
replace with
'JsonNodeFeature.STRIP_TRAILING_BIGDECIMAL_ZEROES'
+ #3654: Infer '@JsonCreator(mode = Mode.DELEGATING)' from use
of '@JsonValue')
+ #3676: Allow use of '@JsonCreator(mode = Mode.PROPERTIES)'
creator for POJOs with"empty String" coercion
+ #3680: Timestamp in classes inside jar showing 02/01/1980
+ #3682: Transient 'Field's are not ignored as Mutators if there
is visible Getter
+ #3690: Incorrect target type for arrays when disabling
coercion
+ #3708: Seems like 'java.nio.file.Path' is safe for Android API
level 26
+ #3730: Add support in 'TokenBuffer' for lazily decoded (big)
numbers
+ #3736: Try to avoid auto-detecting Fields for Record types
+ #3742: schemaType of 'LongSerializer' is wrong
+ #3745: Deprecate classes in package
'com.fasterxml.jackson.databind.jsonschema'
+ #3748: 'DelegatingDeserializer' missing override of
'getAbsentValue()' (and couple of other methods)
+ #3771: Classloader leak: DEFAULT_ANNOTATION_INTROSPECTOR holds
annotation reference
+ #3791: Flush readonly map together with shared on
'SerializerCache.flush()'
+ #3796: Enum Deserialisation Failing with Polymorphic type
validator
+ #3809: Add Stream-friendly alternative to
'ObjectNode.fields()': 'Set<Map.Entry<String, JsonNode>>
properties()'
+ #3814: Enhance 'StdNodeBasedDeserializer' to support
'readerForUpdating'
+ #3816: TokenBuffer does not implement writeString(Reader
reader, int len)
+ #3819: Add convenience method
'SimpleBeanPropertyFilter.filterOutAll()' as counterpart of
'serializeAll()'
+ #3836: 'Optional<Boolean>' is not recognized as boolean field
+ #3853: Add 'MapperFeature.REQUIRE_TYPE_ID_FOR_SUBTYPES' to
enable/disable strict subtype Type Id handling
+ #3876: 'TypeFactory' cache performance degradation with
'constructSpecializedType()'
* 2.14.3 (05-May-2023)
+ #3784: 'PrimitiveArrayDeserializers$ByteDeser.deserialize'
ignores 'DeserializationProblemHandler' for invalid Base64
content
+ #3837: Set transformer factory attributes to improve
protection against XXE
* 2.14.2 (28-Jan-2023)
+ #1751: '@JsonTypeInfo' does not work if the Type Id is an
Integer value
+ #3063: '@JsonValue' fails for Java Record
+ #3699: Allow custom 'JsonNode' implementations
+ #3711: Enum polymorphism not working correctly with DEDUCTION
+ #3741: 'StdDelegatingDeserializer' ignores 'nullValue' of
'_delegateDeserializer'.
* 2.14.1 (21-Nov-2022)
+ #3655: 'Enum' values can not be read from single-element array
even with 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'
+ #3665: 'ObjectMapper' default heap consumption increased
significantly from 2.13.x to 2.14.0
* 2.14.0 (05-Nov-2022)
+ #1980: Add method(s) in 'JsonNode' that works like combination
of 'at()' and 'with()': 'withObject(...)' and 'withArray(...)'
+ #2541: Cannot merge polymorphic objects
+ #3013: Allow disabling Integer to String coercion via
'CoercionConfig'
+ #3212: Add method 'ObjectMapper.copyWith(JsonFactory)'
+ #3311: Add serializer-cache size limit to avoid Metaspace
issues from caching Serializers
+ #3338: 'configOverride.setMergeable(false)' not supported by
'ArrayNode'
+ #3357: '@JsonIgnore' does not if together with '@JsonProperty'
or '@JsonFormat'
+ #3373: Change 'TypeSerializerBase' to skip
'generator.writeTypePrefix()' for 'null' typeId
+ #3394: Allow use of 'JsonNode' field for '@JsonAnySetter'
+ #3405: Create DataTypeFeature abstraction (for JSTEP-7) with
placeholder features
+ #3417: Allow (de)serializing records using
Bean(De)SerializerModifier even when reflection is unavailable
+ #3419: Improve performance of 'UnresolvedForwardReference' for
forward reference resolution
+ #3421: Implement 'JsonNodeFeature.READ_NULL_PROPERTIES' to
allow skipping of JSON 'null' values on reading
+ #3443: Do not strip generic type from 'Class<C>' when
resolving 'JavaType'
+ #3447: Deeply nested JsonNode throws StackOverflowError for
toString()
+ #3475: Support use of fast double parse
+ #3476: Implement 'JsonNodeFeature.WRITE_NULL_PROPERTIES' to
allow skipping JSON 'null' values on writing
+ #3481: Filter method only got called once if the field is null
when using '@JsonInclude(value = JsonInclude.Include.CUSTOM,
valueFilter = SomeFieldFilter.class)'
+ #3484: Update 'MapDeserializer' to support
'StreamReadCapability.DUPLICATE_PROPERTIES'
+ #3497: Deserialization of Throwables with
PropertyNamingStrategy does not work
+ #3500: Add optional explicit 'JsonSubTypes' repeated names
check
+ #3503: 'StdDeserializer' coerces ints to floats even if
configured to fail
+ #3505: Fix deduction deserializer with
DefaultTypeResolverBuilder
+ #3528: 'TokenBuffer' defaults for parser/stream-read features
neither passed from parser nor use real defaults
+ #3530: Change LRUMap to just evict one entry when maxEntries
reached
+ #3533: Deserialize missing value of 'EXTERNAL_PROPERTY' type
using custom 'NullValueProvider'
+ #3535: Replace 'JsonNode.with()' with 'JsonNode.withObject()'
+ #3559: Support 'null'-valued 'Map' fields with "any setter"
+ #3568: Change 'JsonNode.with(String)' and 'withArray(String)'
to consider argument as 'JsonPointer' if valid expression
+ #3590: Add check in primitive value deserializers to avoid
deep wrapper array nesting wrt 'UNWRAP_SINGLE_VALUE_ARRAYS'
[CVE-2022-42003, bsc#1204370]
+ #3609: Allow non-boolean return type for "is-getters" with
'MapperFeature.ALLOW_IS_GETTERS_FOR_NON_BOOLEAN'
+ #3613: Implement 'float' and 'boolean' to 'String' coercion
config
+ #3624: Legacy 'ALLOW_COERCION_OF_SCALARS' interacts poorly
with Integer to Float coercion
+ #3633: Expose 'translate()' method of standard
'PropertyNamingStrategy' implementations
* 2.13.5 (23-Jan-2023)
+ #3659: Improve testing (likely via CI) to try to ensure
compatibility with specific Android SDKs
+ #3661: Jackson 2.13 uses Class.getTypeName() that is only
available on Android SDK 26 (with fix works on ASDK 24)
/usr/share/doc/packages/jackson-databind /usr/share/doc/packages/jackson-databind/CREDITS-2.x /usr/share/doc/packages/jackson-databind/README.md /usr/share/doc/packages/jackson-databind/VERSION-2.x /usr/share/java/jackson-databind.jar /usr/share/licenses/jackson-databind /usr/share/licenses/jackson-databind/LICENSE /usr/share/maven-metadata/jackson-databind.xml /usr/share/maven-poms/jackson-databind.pom
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:14:27 2026