[
https://issues.apache.org/jira/browse/HADOOP-16917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17282465#comment-17282465
]
Morey Straus commented on HADOOP-16917:
---------------------------------------
jackson-databind has 39 security issues with a high water mark of critical.
Please prioritize an update to 2.13+
> Update dependency in branch-3.1
> -------------------------------
>
> Key: HADOOP-16917
> URL: https://issues.apache.org/jira/browse/HADOOP-16917
> Project: Hadoop Common
> Issue Type: Improvement
> Components: build, fs/s3
> Affects Versions: 3.1.4
> Reporter: Wei-Chiu Chuang
> Priority: Blocker
> Labels: release-blocker
> Attachments: dependency-check-report.html
>
>
> Jackson-databind 2.9.10.3 --> 2.10.3
> Zookeeper 3.4.13 --> 3.4.14
> hbase-client 1.2.6 --> 1.2.6.1
> aws-java-sdk-bundle 1.11.271 --> 1.11.563? (this is the version used by trunk)
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
