[
https://issues.apache.org/jira/browse/PARQUET-1895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17212285#comment-17212285
]
ASF GitHub Bot commented on PARQUET-1895:
-----------------------------------------
grumpyjames commented on pull request #811:
URL: https://github.com/apache/parquet-mr/pull/811#issuecomment-707030686
> @grumpyjames, I really hope it meets the standards
I hope so too!
I should clarify here that I have no idea if it does or not - it looks like
there's a template for PR's that's been left untouched - there are some
checkboxes/questions that could be answered? But possibly this change is small
enough for that to not matter! Or maybe that template is really old and no-one
actually reads it! I don't know! Hopefully someone who does can have a look :-)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Update jackson-databind
> -----------------------
>
> Key: PARQUET-1895
> URL: https://issues.apache.org/jira/browse/PARQUET-1895
> Project: Parquet
> Issue Type: Task
> Components: parquet-mr
> Affects Versions: 1.11.0
> Reporter: Patrick OFriel
> Assignee: Gabor Szadovszky
> Priority: Major
> Fix For: 1.12.0
>
>
> The jackson databind 2.9.10.4 has the following CVEs:
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14060]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14061]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14062]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14195]
> They should be resolved if we update to 2.9.10.5
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
