This is an automated email from the ASF dual-hosted git repository.

kgyrtkirk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hive.git


The following commit(s) were added to refs/heads/master by this push:
     new 568ded4b22a HIVE-26300: Upgraded Jackson bom version to 2.12.6.1+ to 
avoid CVE-2020-36518 (#3351) (Sai Hemanth Gantasala reviewed by Zoltan 
Haindrich and Ayush Saxena)
568ded4b22a is described below

commit 568ded4b22a020f4d2d3567f15b287b25a3f2b71
Author: Sai Hemanth Gantasala 
<68923650+saihemanth-cloud...@users.noreply.github.com>
AuthorDate: Thu Jun 9 15:46:56 2022 +0530

    HIVE-26300: Upgraded Jackson bom version to 2.12.6.1+ to avoid 
CVE-2020-36518 (#3351) (Sai Hemanth Gantasala reviewed by Zoltan Haindrich and 
Ayush Saxena)
---
 pom.xml                      | 2 +-
 standalone-metastore/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index fb004de50cf..1c25c659b2a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -142,7 +142,7 @@
     <httpcomponents.client.version>4.5.13</httpcomponents.client.version>
     <httpcomponents.core.version>4.4.13</httpcomponents.core.version>
     <ivy.version>2.4.0</ivy.version>
-    <jackson.version>2.12.0</jackson.version>
+    <jackson.version>2.12.7</jackson.version>
     <jamon.plugin.version>2.3.4</jamon.plugin.version>
     <jamon-runtime.version>2.3.1</jamon-runtime.version>
     <javaewah.version>0.3.2</javaewah.version>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index 4935d0ef3e3..394763327a4 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -77,7 +77,7 @@
     <guava.version>19.0</guava.version>
     <hadoop.version>3.1.0</hadoop.version>
     <hikaricp.version>2.6.1</hikaricp.version>
-    <jackson.version>2.12.0</jackson.version>
+    <jackson.version>2.12.7</jackson.version>
     <javolution.version>5.5.1</javolution.version>
     <junit.version>4.13</junit.version>
     <junit.jupiter.version>5.6.2</junit.jupiter.version>

Reply via email to