[ https://issues.apache.org/jira/browse/HBASE-23174?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16951534#comment-16951534 ]
Hudson commented on HBASE-23174: -------------------------------- SUCCESS: Integrated in Jenkins build HBase-1.3-IT #658 (See [https://builds.apache.org/job/HBase-1.3-IT/658/]) HBASE-23174 Upgrade jackson and jackson-databind to 2.9.10 (branch-1) (busbey: rev 0a50cc59aa30bc911baa5eea36c1cfa67b0106b5) * (edit) pom.xml > Upgrade jackson and jackson-databind to 2.9.10 (branch-1) > --------------------------------------------------------- > > Key: HBASE-23174 > URL: https://issues.apache.org/jira/browse/HBASE-23174 > Project: HBase > Issue Type: Improvement > Components: dependencies, REST, security > Reporter: Andrew Kyle Purtell > Assignee: Andrew Kyle Purtell > Priority: Blocker > Fix For: 1.3.6, 1.4.11, 1.5.1 > > > Two more CVEs (CVE-2019-16335 and CVE-2019-14540) are addressed in > jackson-databind 2.9.10. -- This message was sent by Atlassian Jira (v8.3.4#803005)