Joe McDonnell created IMPALA-11394: -------------------------------------- Summary: Upgrade jackson-databind to version 2.12.6.1 or above Key: IMPALA-11394 URL: https://issues.apache.org/jira/browse/IMPALA-11394 Project: IMPALA Issue Type: Task Components: Infrastructure Affects Versions: Impala 4.2.0 Reporter: Joe McDonnell
Jackson-databind has CVE-2020-36518 that is fixed in version 2.12.6.1 or above. We should upgrade our version listed here: [https://github.com/apache/impala/blob/master/java/pom.xml#L67] {noformat} <jackson-databind.version>2.10.5.1</jackson-databind.version> {noformat} -- This message was sent by Atlassian Jira (v8.20.7#820007) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org