[
https://issues.apache.org/jira/browse/BEAM-7880?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ismaël Mejía updated BEAM-7880:
-------------------------------
Comment: was deleted
(was: This seems to be blocked at least until August 6 because the scala
dependency (needed by the Spark runner) won't be published before.
https://github.com/FasterXML/jackson-module-scala/issues/419)
> Upgrade Jackson databind to version 2.9.9.2
> -------------------------------------------
>
> Key: BEAM-7880
> URL: https://issues.apache.org/jira/browse/BEAM-7880
> Project: Beam
> Issue Type: Improvement
> Components: build-system, sdk-java-core
> Reporter: Ismaël Mejía
> Assignee: Ismaël Mejía
> Priority: Blocker
> Fix For: 2.15.0
>
> Time Spent: 50m
> Remaining Estimate: 0h
>
> Jackson Databind 2.9.9 and earlier versions have multiple CVEs:
> https://www.cvedetails.com/cve/CVE-2019-12814
> https://www.cvedetails.com/cve/CVE-2019-12384
> https://www.cvedetails.com/cve/CVE-2019-14379
> https://www.cvedetails.com/cve/CVE-2019-14439
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
