[
https://issues.apache.org/jira/browse/OOZIE-3650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17475400#comment-17475400
]
PJ Fanning commented on OOZIE-3650:
-----------------------------------
[~asalamon74] any chance that the 'How to Contribute' docs can be updated?
This bit is wrong (mentions no-prefix and doesn't give guidance on the other
params to use for git diff.
{code:java}
Work on the issue in your local development environment and when you think it
is ready for review or integration upload your patch generated by doing git
diff --no-prefix to the JIRA issue. The naming convention of the patch should
be OOZIE-<JIRA NUMBER>-001.patch. For eg: OOZIE-2555-001.patch. {code}
I have used this to build the latest patch:
{code:java}
git diff origin/master master > OOZIE-3650-003.patch {code}
> upgrade jackson - ideally to v2.13.1
> ------------------------------------
>
> Key: OOZIE-3650
> URL: https://issues.apache.org/jira/browse/OOZIE-3650
> Project: Oozie
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
> Labels: patch-available
> Attachments: OOZIE-3650-001.patch, OOZIE-3650-002.patch,
> OOZIE-3650-003.patch
>
>
> Oozie currently has a dependency on an old version of Jackson (2.6.5) -
> [https://github.com/apache/oozie/blob/master/pom.xml#L119]
> There are a number of CVEs open affecting this version.
> https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.6.5
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
