This is an automated email from the ASF dual-hosted git repository.
kgyrtkirk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hive.git
The following commit(s) were added to refs/heads/master by this push:
new 568ded4b22a HIVE-26300: Upgraded Jackson bom version to 2.12.6.1+ to
avoid CVE-2020-36518 (#3351) (Sai Hemanth Gantasala reviewed by Zoltan
Haindrich and Ayush Saxena)
568ded4b22a is described below
commit 568ded4b22a020f4d2d3567f15b287b25a3f2b71
Author: Sai Hemanth Gantasala
<[email protected]>
AuthorDate: Thu Jun 9 15:46:56 2022 +0530
HIVE-26300: Upgraded Jackson bom version to 2.12.6.1+ to avoid
CVE-2020-36518 (#3351) (Sai Hemanth Gantasala reviewed by Zoltan Haindrich and
Ayush Saxena)
---
pom.xml | 2 +-
standalone-metastore/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index fb004de50cf..1c25c659b2a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -142,7 +142,7 @@
<httpcomponents.client.version>4.5.13</httpcomponents.client.version>
<httpcomponents.core.version>4.4.13</httpcomponents.core.version>
<ivy.version>2.4.0</ivy.version>
- <jackson.version>2.12.0</jackson.version>
+ <jackson.version>2.12.7</jackson.version>
<jamon.plugin.version>2.3.4</jamon.plugin.version>
<jamon-runtime.version>2.3.1</jamon-runtime.version>
<javaewah.version>0.3.2</javaewah.version>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index 4935d0ef3e3..394763327a4 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -77,7 +77,7 @@
<guava.version>19.0</guava.version>
<hadoop.version>3.1.0</hadoop.version>
<hikaricp.version>2.6.1</hikaricp.version>
- <jackson.version>2.12.0</jackson.version>
+ <jackson.version>2.12.7</jackson.version>
<javolution.version>5.5.1</javolution.version>
<junit.version>4.13</junit.version>
<junit.jupiter.version>5.6.2</junit.jupiter.version>
