Repository: arrow Updated Branches: refs/heads/master b795e5cff -> 214334977
ARROW-1242: [JAVA] - upgrade jackson to mitigate security vulnerabilities (take 2) sorry, PR #929 failed to actually change the Jackson version, since the `jackson.version` variable defined in java/pom.xml is not used in java/vector/pom.xml That's now fixed in this PR. Author: Matt Darwin <(none)> Author: Matt <mattdar...@yahoo.co.uk> Closes #957 from mattdarwin/ARROW-1242-upgrade-jackson and squashes the following commits: ad15e5f [Matt Darwin] Merge branch 'master' into ARROW-1242-upgrade-jackson ee29d65 [Matt Darwin] Merge branch 'master' of https://github.com/apache/arrow into ARROW-1242-upgrade-jackson 06d7745 [Matt Darwin] upgrading jackson to 2.7.9 PROPERLY this time... 284a4ce [Matt Darwin] Merge branch 'master' of https://github.com/apache/arrow d059517 [Matt Darwin] 1242 upgraing jackson to 2.7.9 bc3b6a0 [Matt] Merge pull request #1 from apache/master Project: http://git-wip-us.apache.org/repos/asf/arrow/repo Commit: http://git-wip-us.apache.org/repos/asf/arrow/commit/21433497 Tree: http://git-wip-us.apache.org/repos/asf/arrow/tree/21433497 Diff: http://git-wip-us.apache.org/repos/asf/arrow/diff/21433497 Branch: refs/heads/master Commit: 214334977823f9cbe495e920eb02fe306517abd3 Parents: b795e5c Author: Matt Darwin <(none)> Authored: Fri Aug 11 17:16:25 2017 -0400 Committer: Wes McKinney <wes.mckin...@twosigma.com> Committed: Fri Aug 11 17:16:25 2017 -0400 ---------------------------------------------------------------------- java/vector/pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/arrow/blob/21433497/java/vector/pom.xml ---------------------------------------------------------------------- diff --git a/java/vector/pom.xml b/java/vector/pom.xml index a81bbd0..09f3d74 100644 --- a/java/vector/pom.xml +++ b/java/vector/pom.xml @@ -39,12 +39,12 @@ <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-annotations</artifactId> - <version>2.7.1</version> + <version>${jackson.version}</version> </dependency> <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-databind</artifactId> - <version>2.7.1</version> + <version>${jackson.version}</version> </dependency> <dependency> <groupId>com.carrotsearch</groupId>
