Merge "Failing test for an expansion with negation"
diff --git a/Changes b/Changes
index d48d3ac..edf568f 100644
--- a/Changes
+++ b/Changes
@@ -1,3 +1,7 @@
+0.58.1 2018-10-22
+    - [bugfix] Security upgrade of Jackson for CVE-2017-17485 and
+      CVE-2018-7489 (diewald)
+
 0.58.0 2018-09-03
     - [feature] Implemented referencing cached collection (margaretha)
     - [feature] Implemented deserialization of collection with array values
@@ -19,7 +23,7 @@
     - [cleanup] Rewrite test suite for caching to be part of
       regular test suite (diewald)
     - [bugfix] Fixed missing docs in VC cache (margaretha)
-    
+    - [documentation] Added update hint to Readme (diewald)
 
 0.57 2018-04-05
     - [feature] Support text queries in metadata
diff --git a/Readme.md b/Readme.md
index 1860e48..4b41317 100644
--- a/Readme.md
+++ b/Readme.md
@@ -54,14 +54,14 @@
 
 ## Setup
 
-To fetch the latest version of Krill ...
+To install the latest version of Krill from scratch, do ...
 
 ```
 $ git clone https://github.com/KorAP/Krill
 $ cd Krill
 ```
 
-To run the test suite ...
+Then run the test suite ...
 
 ```
 $ mvn clean test
@@ -73,6 +73,16 @@
 ```
 $ mvn install
 ```
+
+To update an existing repository, pull the latest version at the Krill 
+installation directory
+
+```
+$ git pull origin master
+```
+
+Afterwards, rerun the test suite and install the library.
+
 ## Caveats
 
 Krill operates on tokens and is limited to a single tokenization stream.
diff --git a/pom.xml b/pom.xml
index a3e8b08..f994206 100644
--- a/pom.xml
+++ b/pom.xml
@@ -35,7 +35,7 @@
 
 	<groupId>de.ids_mannheim.korap</groupId>
 	<artifactId>Krill</artifactId>
-	<version>0.58.0</version>
+	<version>0.58.1</version>
 	<packaging>jar</packaging>
 
 	<name>Krill</name>
@@ -60,7 +60,7 @@
 
 	<properties>
 		<jersey.version>2.15</jersey.version>
-		<jackson.version>2.9.1</jackson.version>
+		<jackson.version>[2.9.5,)</jackson.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 	</properties>