[ZOOKEEPER-3751] upgrade jackson-databind to 2.10 from 2.9 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Task
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 3.6.0, 3.7.0, 3.5.7
Fix Version/s: 3.7.0, 3.6.1, 3.5.8
Component/s: security
Labels:
- pull-request-available

Description

Upgrade jackson-databind to 2.10 form 2.9. 2.10 is the current latest version. Also we've been seeing lots of vulnerability reports with 2.9 - perhaps this will help.

Attachments

Issue Links

fixes

ZOOKEEPER-3750 update jackson-databind to address CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

Resolved

supercedes

ZOOKEEPER-3750 update jackson-databind to address CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

Resolved

links to

GitHub Pull Request #1283

GitHub Pull Request #1341

Activity

People

Assignee:: Patrick D. Hunt

Reporter:: Patrick D. Hunt

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 09/Mar/20 00:46

Updated:: 11/May/20 15:41

Resolved:: 14/Mar/20 16:47

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

1.5h