[ https://issues.apache.org/jira/browse/OOZIE-3650?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
PJ Fanning updated OOZIE-3650: ------------------------------ Attachment: OOZIE-3650-003.patch > upgrade jackson - ideally to v2.13.1 > ------------------------------------ > > Key: OOZIE-3650 > URL: https://issues.apache.org/jira/browse/OOZIE-3650 > Project: Oozie > Issue Type: Improvement > Reporter: PJ Fanning > Priority: Major > Labels: patch-available > Attachments: OOZIE-3650-001.patch, OOZIE-3650-002.patch, > OOZIE-3650-003.patch > > > Oozie currently has a dependency on an old version of Jackson (2.6.5) - > [https://github.com/apache/oozie/blob/master/pom.xml#L119] > There are a number of CVEs open affecting this version. > https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.6.5 -- This message was sent by Atlassian Jira (v8.20.1#820001)