[ 
https://issues.apache.org/jira/browse/HADOOP-18033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17565978#comment-17565978
 ] 

PJ Fanning commented on HADOOP-18033:
-------------------------------------

[[email protected]] I've had to make a change to 
https://github.com/apache/hadoop/pull/4547 - there is also 
https://github.com/apache/hadoop/pull/4544 (which builds ok).

The difference is that 4544 uses an older version of Jackson - but both PRs 
involve downgrading Jackson.

Is there a branch you would prefer us to target for your 3.3.3+ cve-only 
release?

> Upgrade fasterxml Jackson to 2.13.0
> -----------------------------------
>
>                 Key: HADOOP-18033
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18033
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: build
>            Reporter: Akira Ajisaka
>            Assignee: Viraj Jasani
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.4.0, 3.3.2
>
>          Time Spent: 6.5h
>  Remaining Estimate: 0h
>
> Spark 3.2.0 depends on Jackson 2.12.3. Let's upgrade to 2.12.5 (2.12.x latest 
> as of now) or upper.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to