This is an automated email from the ASF dual-hosted git repository.
vanzin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-livy.git
The following commit(s) were added to refs/heads/master by this push:
new 5767789 [LIVY-568][BUILD] Upgrade jackson version to 2.9.8
5767789 is described below
commit 57677897b486bab5bb39e78eb0d7f734262411ae
Author: Gyorgy Gal <gal.gyo...@gmail.com>
AuthorDate: Tue Mar 12 08:48:29 2019 -0700
[LIVY-568][BUILD] Upgrade jackson version to 2.9.8
## What changes were proposed in this pull request?
Due to security issues of jackson databind module
(https://github.com/FasterXML/jackson-databind/issues/2186) proposing to
upgrade jackson version to 2.9.8.
## How was this patch tested?
Existing UTs.
Author: Gyorgy Gal <gal.gyo...@gmail.com>
Closes #153 from gyogal/LIVY-568.
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 2177134..898a45f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -87,7 +87,7 @@
<guava.version>15.0</guava.version>
<httpclient.version>4.5.3</httpclient.version>
<httpcore.version>4.4.4</httpcore.version>
- <jackson.version>2.9.5</jackson.version>
+ <jackson.version>2.9.8</jackson.version>
<javax.servlet-api.version>3.1.0</javax.servlet-api.version>
<jetty.version>9.3.24.v20180605</jetty.version>
<json4s.version>3.2.11</json4s.version>
