[
https://issues.apache.org/jira/browse/CASSANDRA-17231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Semb Wever updated CASSANDRA-17231:
-------------------------------------------
Since Version: NA
Resolution: Fixed
Status: Resolved (was: Ready to Commit)
> Upgrade cassandra-driver-core to 3.12.1
> ---------------------------------------
>
> Key: CASSANDRA-17231
> URL: https://issues.apache.org/jira/browse/CASSANDRA-17231
> Project: Apache Cassandra
> Issue Type: Bug
> Components: Dependencies
> Reporter: Phyllis Li
> Assignee: Michael Semb Wever
> Priority: Normal
> Labels: security
> Fix For: 5.0.4, 5.1
>
> Attachments:
> ci_summary_thelastpickle_mck-17231-5.0_204.html.download.zip,
> results_details_thelastpickle_mck-17231-5.0_204.tar.xz
>
>
> The current Cassandra driver version is 3.11.0, which uses a vulnerable
> version of jackson-databind.
> We may want to switch to the re-branded com.datastax.oss:java-driver-core
> 4.13.0.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
