Update Woodstox to 6.2.5, resolved #463 and #465

Author: cowtowncoder

pom.xml

@@ -86,7 +86,7 @@ alternative support for serializing POJOs as XML and deserializing XML as pojos.
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
       <artifactId>woodstox-core</artifactId>
-      <version>6.2.4</version>
+      <version>6.2.5</version>
       <exclusions>
         <exclusion>
 	  <groupId>javax.xml.stream</groupId>

release-notes/CREDITS-2.x

@@ -155,3 +155,11 @@ Westin Miller (westinrm@github)
 
 * Contributed #456: Fix JsonAlias with unwrapped lists
  (2.12.3)
+
+Fabian Meumertzheim (fmeum@github)
+
+* Reported #463: NPE via boundary condition, document with only XML declaration
+ (2.13.0)
+* Reported #465: ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz)
+ (2.13.0)
+

release-notes/VERSION-2.x

@@ -10,6 +10,10 @@ Project: jackson-dataformat-xml
  (reported by richardsonwk@github)
 #462: Remove `jackson-module-jaxb-annotations` runtime dependency (leave
   as a test dep)
+#463: NPE via boundary condition, document with only XML declaration
+ (reported by Fabian M)
+#465: ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz)
+ (reported by Fabian M)
 
 2.12.3 (not yet released)
 

src/test/java/com/fasterxml/jackson/dataformat/xml/failing/Fuzz463_32872_XmlDeclTest.java renamed to src/test/java/com/fasterxml/jackson/dataformat/xml/fuzz/Fuzz463_32872_XmlDeclTest.java

@@ -1,4 +1,4 @@
-package com.fasterxml.jackson.dataformat.xml.failing;
+package com.fasterxml.jackson.dataformat.xml.fuzz;
 
 import java.nio.charset.StandardCharsets;
 

src/test/java/com/fasterxml/jackson/dataformat/xml/failing/Fuzz465_32906_CDataReadTest.java renamed to src/test/java/com/fasterxml/jackson/dataformat/xml/fuzz/Fuzz465_32906_CDataReadTest.java

@@ -1,4 +1,4 @@
-package com.fasterxml.jackson.dataformat.xml.failing;
+package com.fasterxml.jackson.dataformat.xml.fuzz;
 
 import com.fasterxml.jackson.core.exc.StreamReadException;
 import com.fasterxml.jackson.databind.JsonNode;