[
https://issues.apache.org/jira/browse/CASSANDRA-15827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kevin Eveker updated CASSANDRA-15827:
-------------------------------------
Description:
Recent scan results identified the following CVEs that require this upgrade to
address
[https://nvd.nist.gov/vuln/detail/CVE-2020-8840]
[https://nvd.nist.gov/vuln/detail/CVE-2020-9548]
[https://nvd.nist.gov/vuln/detail/CVE-2020-9547]
[https://nvd.nist.gov/vuln/detail/CVE-2020-9546]
[https://nvd.nist.gov/vuln/detail/CVE-2020-10673]
[https://nvd.nist.gov/vuln/detail/CVE-2020-10672]
[https://nvd.nist.gov/vuln/detail/CVE-2020-10968]
[https://nvd.nist.gov/vuln/detail/CVE-2020-10969]
[https://nvd.nist.gov/vuln/detail/CVE-2020-11112]
[https://nvd.nist.gov/vuln/detail/CVE-2020-11113]
[https://nvd.nist.gov/vuln/detail/CVE-2020-11111]
[https://nvd.nist.gov/vuln/detail/CVE-2020-11619]
[https://nvd.nist.gov/vuln/detail/CVE-2020-11620]
was:
Recent scan results identified the following CVEs that require this upgrade to
address
CVE-2020-8840
CVE-2020-9548
CVE-2020-9547
CVE-2020-9546
CVE-2020-10673
CVE-2020-10672
CVE-2020-10968
CVE-2020-10969
CVE-2020-11112
CVE-2020-11113
CVE-2020-11111
CVE-2020-11619
CVE-2020-11620
> Upgrade to Jackson Databind 2.9.10.4 or later to address CVEs
> -------------------------------------------------------------
>
> Key: CASSANDRA-15827
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15827
> Project: Cassandra
> Issue Type: Improvement
> Reporter: Kevin Eveker
> Priority: Normal
>
> Recent scan results identified the following CVEs that require this upgrade
> to address
> [https://nvd.nist.gov/vuln/detail/CVE-2020-8840]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-9548]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-9547]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-9546]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-10673]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-10672]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-10968]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-10969]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-11112]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-11113]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-11111]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-11619]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-11620]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
