Colm O hEigeartaigh created AMQ-7266:
----------------------------------------
Summary: Update Jackson databind to 2.9.9.3
Key: AMQ-7266
URL: https://issues.apache.org/jira/browse/AMQ-7266
Project: ActiveMQ
Issue Type: Improvement
Reporter: Colm O hEigeartaigh
Fix For: 5.16.0, 5.15.10
We should update Jackson databind to 2.9.9.3. Two new CVEs are issued for
2.9.9.2 (and a bug fix in 2.9.9.3):
[https://www.cvedetails.com/cve/CVE-2019-14379]
[https://www.cvedetails.com/cve/CVE-2019-14439|https://www.cvedetails.com/cve/CVE-2019-14379]
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
