Update release notes wrt #390

FasterXML · Feb 26, 2023 · c6e5e5e · c6e5e5e
1 parent 3a433d8
commit c6e5e5e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/release-notes/CREDITS-2.x b/release-notes/CREDITS-2.x
@@ -193,8 +193,10 @@ PJ Fanning (pjfanning@github)
 #283: (csv) `CsvSchema.getColumnDesc()` returns unpaired square bracket when columns
   are empty
  (2.13.0)
-* Contributed #314: (csv) Add fast floating-point parsing, generation support
+#314: (csv) Add fast floating-point parsing, generation support
  (2.14.0)
+#390: (yaml) Upgrade to Snakeyaml 2.0 (resolves CVE-2022-1471)
+ (2.15.0)
 
 Falk Hanisch (mrpiggi@github)
 #288: Caching conflict when creating CSV schemas with different views

diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -16,15 +16,17 @@ Active Maintainers:
 
 2.15.0 (not yet released)
 
-#373: Positive numbers with plus sign not quoted correctly with
+#373: (yaml) Positive numbers with plus sign not quoted correctly with
   `ALWAYS_QUOTE_NUMBERS_AS_STRINGS`
  (requested by @dyadyaJora)
+#390: (yaml) Upgrade to Snakeyaml 2.0 (resolves CVE-2022-1471)
+ (contributed by @pjfanning)
 
 2.14.2 (28-Jan-2023)
 
-#356: Fix TOML parse failure when number token hits buffer edge
+#356: (toml) Fix TOML parse failure when number token hits buffer edge
  (fix by Jonas K)
-#370: Replace use of deprecated constructor of SnakeYAML ParserImpl
+#370: (yaml) Replace use of deprecated constructor of SnakeYAML ParserImpl
  (contributed by Andrey S)
 
 2.14.1 (21-Nov-2022)