This is an automated email from the ASF dual-hosted git repository.

aajisaka pushed a commit to branch branch-3.2
in repository https://gitbox.apache.org/repos/asf/hadoop.git


The following commit(s) were added to refs/heads/branch-3.2 by this push:
     new bc68741  HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us 
from the endless CVE patches (#3748)
bc68741 is described below

commit bc6874139f534af81a83523cf10508d3d16a032f
Author: Akira Ajisaka <akir...@amazon.com>
AuthorDate: Fri Dec 10 16:24:06 2021 +0900

    HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the 
endless CVE patches (#3748)
    
    (cherry picked from commit 69faaa1d58ad7de18a8dfa477531653a2c061568)
    
     Conflicts:
        hadoop-project/pom.xml
---
 hadoop-client-modules/hadoop-client-runtime/pom.xml | 7 +++++++
 hadoop-project/pom.xml                              | 4 ++--
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/hadoop-client-modules/hadoop-client-runtime/pom.xml 
b/hadoop-client-modules/hadoop-client-runtime/pom.xml
index 8e1d248..535f964 100644
--- a/hadoop-client-modules/hadoop-client-runtime/pom.xml
+++ b/hadoop-client-modules/hadoop-client-runtime/pom.xml
@@ -335,6 +335,13 @@
                       </excludes>
                     </relocation>
                     <relocation>
+                      <pattern>javax/xml/bind/</pattern>
+                      
<shadedPattern>${shaded.dependency.prefix}.javax.xml.bind.</shadedPattern>
+                      <excludes>
+                        <exclude>**/pom.xml</exclude>
+                      </excludes>
+                    </relocation>
+                    <relocation>
                       <pattern>net/</pattern>
                       
<shadedPattern>${shaded.dependency.prefix}.net.</shadedPattern>
                       <excludes>
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index a173af8..4d4e166 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -71,8 +71,8 @@
 
     <!-- jackson versions -->
     <jackson.version>1.9.13</jackson.version>
-    <jackson2.version>2.9.10</jackson2.version>
-    <jackson2.databind.version>2.9.10.4</jackson2.databind.version>
+    <jackson2.version>2.10.3</jackson2.version>
+    <jackson2.databind.version>2.10.3</jackson2.databind.version>
 
     <!-- httpcomponents versions -->
     <httpclient.version>4.5.13</httpclient.version>

---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org

Reply via email to