This is an automated email from the ASF dual-hosted git repository.
jbonofre pushed a commit to branch karaf-4.4.x
in repository https://gitbox.apache.org/repos/asf/karaf.git
The following commit(s) were added to refs/heads/karaf-4.4.x by this push:
new 31f1b3fdac Upgrade jackson 2.18 legacy features to 2.18.10 (#2901)
31f1b3fdac is described below
commit 31f1b3fdac58aa883270f577a0b3a2e2826b48f8
Author: Holger Friedrich <[email protected]>
AuthorDate: Tue Sep 15 07:39:05 2026 +0200
Upgrade jackson 2.18 legacy features to 2.18.10 (#2901)
Fixes CVE-2026-54513.
---
assemblies/features/specs/src/main/feature/feature.xml | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)
diff --git a/assemblies/features/specs/src/main/feature/feature.xml
b/assemblies/features/specs/src/main/feature/feature.xml
index 845af441f4..aa40a63b7d 100644
--- a/assemblies/features/specs/src/main/feature/feature.xml
+++ b/assemblies/features/specs/src/main/feature/feature.xml
@@ -70,20 +70,20 @@
</feature>
<!-- jackson 2.18 -->
- <feature name="jackson" version="2.18.3">
- <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-core/2.18.3</bundle>
- <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-annotations/2.18.3</bundle>
- <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-databind/2.18.3</bundle>
+ <feature name="jackson" version="2.18.10">
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-core/2.18.10</bundle>
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-annotations/2.18.10</bundle>
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.core/jackson-databind/2.18.10</bundle>
</feature>
- <feature name="jackson-jaxrs" version="2.18.3">
+ <feature name="jackson-jaxrs" version="2.18.10">
<feature>jackson</feature>
<feature>jaxrs</feature>
<feature>jakarta.annotation</feature>
<bundle start-level="35">mvn:org.yaml/snakeyaml/2.5</bundle>
- <bundle
start-level="35">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.18.3</bundle>
- <bundle
start-level="35">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.18.3</bundle>
- <bundle
start-level="35">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.18.3</bundle>
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.18.10</bundle>
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.18.10</bundle>
+ <bundle
start-level="35">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.18.10</bundle>
</feature>
<!-- jackson 2.20 -->
