This is an automated email from the ASF dual-hosted git repository.
steveloughran pushed a commit to branch branch-3.5
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.5 by this push:
new dbf2a42316a HADOOP-19939. Upgrade to Jackson 2.18.9 due to security
fixes (#8599)
dbf2a42316a is described below
commit dbf2a42316aeafd627eb2b6abcf517ccab7da0f8
Author: PJ Fanning <[email protected]>
AuthorDate: Wed Jul 22 18:28:15 2026 +0100
HADOOP-19939. Upgrade to Jackson 2.18.9 due to security fixes (#8599)
Contributed by PJ Fanning
---
LICENSE-binary | 12 ++++++------
hadoop-project/pom.xml | 2 +-
2 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index fd215f66715..2203452ab99 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -224,12 +224,12 @@ com.aliyun:java-trace-api:0.2.11-beta
com.aliyun.oss:aliyun-sdk-oss:3.13.2
com.cedarsoftware:java-util:1.9.0
com.cedarsoftware:json-io:2.5.1
-com.fasterxml.jackson.core:jackson-annotations:2.18.8
-com.fasterxml.jackson.core:jackson-core:2.18.8
-com.fasterxml.jackson.core:jackson-databind:2.18.8
-com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:2.18.8
-com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:2.18.8
-com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.18.8
+com.fasterxml.jackson.core:jackson-annotations:2.18.9
+com.fasterxml.jackson.core:jackson-core:2.18.9
+com.fasterxml.jackson.core:jackson-databind:2.18.9
+com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:2.18.9
+com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:2.18.9
+com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.18.9
com.fasterxml.uuid:java-uuid-generator:3.1.4
com.fasterxml.woodstox:woodstox-core:5.4.0
com.github.ben-manes.caffeine:caffeine:2.9.3
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index d7f1f45b2ee..56fb55dd3ab 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -76,7 +76,7 @@
<jaxb.version>2.3.9</jaxb.version>
<!-- jackson versions -->
- <jackson2.version>2.18.8</jackson2.version>
+ <jackson2.version>2.18.9</jackson2.version>
<jackson2.databind.version>${jackson2.version}</jackson2.databind.version>
<!-- httpcomponents versions -->
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
