This is an automated email from the ASF dual-hosted git repository.

technoboy pushed a commit to branch branch-2.11
in repository https://gitbox.apache.org/repos/asf/pulsar.git


The following commit(s) were added to refs/heads/branch-2.11 by this push:
     new bd2875667bd [fix][sec] Upgrade jackson-databind to 2.13.4.2 to get rid 
of CVE-2022-42003 (#18394)
bd2875667bd is described below

commit bd2875667bda8c4c81c349f058519792a51abe98
Author: Nicolò Boschi <[email protected]>
AuthorDate: Thu Nov 10 16:53:42 2022 +0100

    [fix][sec] Upgrade jackson-databind to 2.13.4.2 to get rid of 
CVE-2022-42003 (#18394)
    
    * [fix][sec] Upgrade jackson-databind to 2.13.4.2 to get rid of 
CVE-2022-42003
    
    * Fix IO jackson dependencies
    
    * Fix IO http
    
    * revert unrelated change
---
 pulsar-io/http/pom.xml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pulsar-io/http/pom.xml b/pulsar-io/http/pom.xml
index cd5a38d0ada..b190b0f5cc1 100644
--- a/pulsar-io/http/pom.xml
+++ b/pulsar-io/http/pom.xml
@@ -51,7 +51,6 @@
         <dependency>
             <groupId>com.fasterxml.jackson.datatype</groupId>
             <artifactId>jackson-datatype-jsr310</artifactId>
-            <version>${jackson.version}</version>
         </dependency>
 
         <dependency>

Reply via email to