[ https://issues.apache.org/jira/browse/HADOOP-16883?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Wei-Chiu Chuang resolved HADOOP-16883. -------------------------------------- Resolution: Duplicate Sorry missed this one. [~smeng] updated jackson-databind in HADOOP-16891 to 2.9.10.3 > update jackon-databind version > ------------------------------ > > Key: HADOOP-16883 > URL: https://issues.apache.org/jira/browse/HADOOP-16883 > Project: Hadoop Common > Issue Type: Improvement > Components: build > Reporter: angerszhu > Priority: Major > > according to > [CVE-2020-8840|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840], > maybe we should update jackson-databind to 2.9.10.3 or 2.10.x?* -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org