[
https://issues.apache.org/jira/browse/HADOOP-16619?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16948257#comment-16948257
]
Akira Ajisaka commented on HADOOP-16619:
----------------------------------------
Thanks [~weichiu] for the comment.
Backported HADOOP-16365, HADOOP-16451, HADOOP-16487, HADOOP-16533, and
HADOOP-16619 to branch-3.2.
> Upgrade jackson and jackson-databind to 2.9.10
> ----------------------------------------------
>
> Key: HADOOP-16619
> URL: https://issues.apache.org/jira/browse/HADOOP-16619
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Siyao Meng
> Assignee: Siyao Meng
> Priority: Major
> Fix For: 3.3.0
>
>
> Two more CVEs (CVE-2019-16335 and CVE-2019-14540) are addressed in
> jackson-databind 2.9.10.
> For details see Jackson Release 2.9.10 [release
> notes|https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.10].
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
