Jackson Release 2.6.7

Patch version of 2.6, released June 5th, 2016.

This is planned to be the last full 2.6 release of all components: further releases, if any, will be micro-releases of specific components with issues.

Micro-releases

2.6.7.1

After 2.6.7, an important security fix was backported into 2.6.x branch, resulting in a jackson-databind micro-patch. It contains following fixes

• #1383: Problem with @JsonCreator with 1-arg factory-method, implicit param names
• #1599: Backport the extra safety checks for polymorphic deserialization

Changes, core

Streaming

• #280: FilteringGeneratorDelegate.writeUTF8String() should delegate to writeUTF8String()

Databind

• #1194: Incorrect signature for generic type via JavaType.getGenericSignature()
• #1228: @JsonAnySetter does not deserialize null to Deserializer's NullValue
• #1255: @JsonIdentityInfo incorrectly serializing forward references

Kotlin

• Various fixes