Siyao Meng created HADOOP-16487: ----------------------------------- Summary: Update jackson-databind to 2.9.9.2 Key: HADOOP-16487 URL: https://issues.apache.org/jira/browse/HADOOP-16487 Project: Hadoop Common Issue Type: Bug Reporter: Siyao Meng Assignee: Siyao Meng
Another CVE in jackson-databind: https://nvd.nist.gov/vuln/detail/CVE-2019-14379 jackson-databind 2.9.9.2 is available: https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind Side note: Here's a discussion jira on whether to remove jackson-databind due to the increasing number of CVEs in this dependency recently: HADOOP-16485 -- This message was sent by Atlassian JIRA (v7.6.14#76016) --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org