[ 
https://issues.apache.org/jira/browse/HADOOP-16905?focusedWorklogId=690917&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-690917
 ]

ASF GitHub Bot logged work on HADOOP-16905:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 06/Dec/21 11:33
            Start Date: 06/Dec/21 11:33
    Worklog Time Spent: 10m 
      Work Description: aajisaka edited a comment on pull request #3748:
URL: https://github.com/apache/hadoop/pull/3748#issuecomment-986691505


   @virajjasani
   
   > Hence, looks like revert commit was also part of the build and that's why 
full QA was not triggered (as per logs).
   
   It is not the reason why full QA was not triggered. I commented in 
HADOOP-18035 why the subsequent modules were not executed in branch-3.2 and 
branch-2.10.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 690917)
    Time Spent: 3h 40m  (was: 3.5h)

> Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches
> ----------------------------------------------------------------------------
>
>                 Key: HADOOP-16905
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16905
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>            Priority: Major
>              Labels: pull-request-available, release-blocker
>             Fix For: 3.3.0
>
>          Time Spent: 3h 40m
>  Remaining Estimate: 0h
>
> Jackson-databind 2.10 should relieve us from the endless CVE patches 
> according to 
> https://medium.com/@cowtowncoder/jackson-2-10-features-cd880674d8a2
> Not sure if this is an easy update, but i think we should do this in the 
> Hadoop 3.3.0 and before removing jackson-databind entirely.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to