This is an automated email from the ASF dual-hosted git repository.

maoling pushed a commit to branch branch-3.7
in repository https://gitbox.apache.org/repos/asf/zookeeper.git


The following commit(s) were added to refs/heads/branch-3.7 by this push:
     new 13b0999  ZOOKEEPER-4429: Update jackson-databind to 2.13.1
13b0999 is described below

commit 13b09990ecd42de9565512b0047f5ebb46868986
Author: Frederiko Costa <[email protected]>
AuthorDate: Sat Jan 22 14:27:41 2022 +0800

    ZOOKEEPER-4429: Update jackson-databind to 2.13.1
    
    This PR updates jackson-databind to 2.13.1 to address a raised 
vulnerability that could possible DoS attack certain versions of Jackson. 
Please refer to GH issue #3328 for further info. On top of that, it also fixes 
now deprecated PropertyNamingStrategy class initialization issue #2715.
    
    Author: Frederiko Costa <[email protected]>
    
    Reviewers: Enrico Olivelli <[email protected]>, Shoothzj 
<[email protected]>, maoling <[email protected]>
    
    Closes #1788 from frederiko/ZOOKEEPER-4414_jackson_databind_update
---
 pom.xml                                                               | 2 +-
 .../main/java/org/apache/zookeeper/server/admin/JsonOutputter.java    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index 2ecaf86..cd255b3 100755
--- a/pom.xml
+++ b/pom.xml
@@ -439,7 +439,7 @@
     <commons-cli.version>1.4</commons-cli.version>
     <netty.version>4.1.70.Final</netty.version>
     <jetty.version>9.4.43.v20210629</jetty.version>
-    <jackson.version>2.10.5.1</jackson.version>
+    <jackson.version>2.13.1</jackson.version>
     <jline.version>2.14.6</jline.version>
     <snappy.version>1.1.7.7</snappy.version>
     <kerby.version>2.0.0</kerby.version>
diff --git 
a/zookeeper-server/src/main/java/org/apache/zookeeper/server/admin/JsonOutputter.java
 
b/zookeeper-server/src/main/java/org/apache/zookeeper/server/admin/JsonOutputter.java
index 0679cfa..7d94574 100644
--- 
a/zookeeper-server/src/main/java/org/apache/zookeeper/server/admin/JsonOutputter.java
+++ 
b/zookeeper-server/src/main/java/org/apache/zookeeper/server/admin/JsonOutputter.java
@@ -21,7 +21,7 @@ package org.apache.zookeeper.server.admin;
 import com.fasterxml.jackson.core.JsonGenerationException;
 import com.fasterxml.jackson.databind.JsonMappingException;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.fasterxml.jackson.databind.PropertyNamingStrategy;
+import com.fasterxml.jackson.databind.PropertyNamingStrategies;
 import com.fasterxml.jackson.databind.SerializationFeature;
 import java.io.IOException;
 import java.io.PrintWriter;
@@ -40,7 +40,7 @@ public class JsonOutputter implements CommandOutputter {
         mapper = new ObjectMapper();
         mapper.configure(SerializationFeature.WRITE_ENUMS_USING_TO_STRING, 
true);
         mapper.configure(SerializationFeature.INDENT_OUTPUT, true);
-        mapper.setPropertyNamingStrategy(PropertyNamingStrategy.SNAKE_CASE);
+        mapper.setPropertyNamingStrategy(PropertyNamingStrategies.SNAKE_CASE);
     }
 
     @Override

Reply via email to