Wei-Chiu Chuang created HADOOP-16905: ----------------------------------------
Summary: Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches Key: HADOOP-16905 URL: https://issues.apache.org/jira/browse/HADOOP-16905 Project: Hadoop Common Issue Type: Sub-task Reporter: Wei-Chiu Chuang Jackson-databind 2.10 should relieve us from the endless CVE patches according to https://medium.com/@cowtowncoder/jackson-2-10-features-cd880674d8a2 Not sure if this is an easy update, but i think we should do this in the Hadoop 3.3.0 and before removing jackson-databind entirely. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org