Add Jackson version constraint bump to NEWS

emlun · emlun · commit a30239d3e226 · 2022-03-25T18:17:21.000+01:00
diff --git a/NEWS b/NEWS
@@ -4,6 +4,8 @@ Fixes:
 
 * Fixed `PublicKeyCredential` failing to parse from JSON if an
   `"authenticatorAttachment"` attribute was present.
+* Bumped Jackson dependency to version [2.13.2.1,3) in response to
+  CVE-2020-36518
 
 
 == Version 1.12.2 ==
