[
https://issues.apache.org/jira/browse/PARQUET-1895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17213016#comment-17213016
]
ASF GitHub Bot commented on PARQUET-1895:
-----------------------------------------
gszadovszky commented on pull request #811:
URL: https://github.com/apache/parquet-mr/pull/811#issuecomment-707627412
I would suggest writing to the dev list of the parquet community about this
topic.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Update jackson-databind
> -----------------------
>
> Key: PARQUET-1895
> URL: https://issues.apache.org/jira/browse/PARQUET-1895
> Project: Parquet
> Issue Type: Task
> Components: parquet-mr
> Affects Versions: 1.11.0
> Reporter: Patrick OFriel
> Assignee: Gabor Szadovszky
> Priority: Major
> Fix For: 1.12.0
>
>
> The jackson databind 2.9.10.4 has the following CVEs:
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14060]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14061]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14062]
> [https://nvd.nist.gov/vuln/detail/CVE-2020-14195]
> They should be resolved if we update to 2.9.10.5
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
