[ https://issues.apache.org/jira/browse/STORM-3757?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ethan Li resolved STORM-3757. ----------------------------- Fix Version/s: 2.3.0 Resolution: Fixed [~kishorvpatil] I filed a JIRA for this since I feel we should include this in the release note. And I merged this to master: 874b87cd7b71107558f734cdb5cdb7f36f5f3d42 Thanks! > Update jackson version to 2.10.0 > -------------------------------- > > Key: STORM-3757 > URL: https://issues.apache.org/jira/browse/STORM-3757 > Project: Apache Storm > Issue Type: Dependency upgrade > Reporter: Ethan Li > Assignee: Kishor Patil > Priority: Major > Fix For: 2.3.0 > > Time Spent: 10m > Remaining Estimate: 0h > > Update jackson version to 2.10.0 to avoid CVE-2019-14892 and CVE-2019-14893 -- This message was sent by Atlassian Jira (v8.3.4#803005)