Resolved issues

Ticket ID Description

PF-28564

Updated jackson-databind to version 2.9.10.8.

PF-28683

Updated the Apache Velocity engine with security patches.

PF-28729

Resolved an issue that prevented PingFederate from using the OAuth device authorization grant type when authenticating users with an IdP connection.

PF-28731

Provided a workaround for an issue that prevents administrators running PingFederate 10.1.0 from performing a rolling upgrade to a later 10.1 maintenance release. To enable the workaround, set rebalance.lock.required=false in the cluster-adaptive.conf file on the new nodes before startup. After completing the upgrade, set this property to true or remove it.