[ https://issues.apache.org/jira/browse/HBASE-23174?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16951503#comment-16951503 ]
Sean Busbey commented on HBASE-23174: ------------------------------------- merged to branch-1. waiting on branch-1.4 and branch-1.3 to pass {{hbase-rest}} tests locally and will then close this out. > Upgrade jackson and jackson-databind to 2.9.10 (branch-1) > --------------------------------------------------------- > > Key: HBASE-23174 > URL: https://issues.apache.org/jira/browse/HBASE-23174 > Project: HBase > Issue Type: Improvement > Reporter: Andrew Kyle Purtell > Assignee: Andrew Kyle Purtell > Priority: Major > Fix For: 1.3.6, 1.4.11, 1.5.1 > > > Two more CVEs (CVE-2019-16335 and CVE-2019-14540) are addressed in > jackson-databind 2.9.10. -- This message was sent by Atlassian Jira (v8.3.4#803005)