[ https://issues.apache.org/jira/browse/HBASE-22728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16894680#comment-16894680 ]
Viraj Jasani commented on HBASE-22728: -------------------------------------- Attached dependecy tree for org.codehaus.jackson:* with applied patch for review purpose. Above QA failure message for shadedjar is: Found Banned Dependency: jdk.tools:jdk.tools:jar:1.8 (which also comes without the patch applied on branch-1). Hope it is not a concern. > Upgrade jackson dependencies in branch-1 > ---------------------------------------- > > Key: HBASE-22728 > URL: https://issues.apache.org/jira/browse/HBASE-22728 > Project: HBase > Issue Type: Sub-task > Affects Versions: 1.4.10, 1.3.5 > Reporter: Andrew Purtell > Assignee: Viraj Jasani > Priority: Major > Fix For: 1.5.0, 1.3.6, 1.4.11 > > Attachments: HBASE-22728.branch-1.01.patch, dependency_codehaus.out > > > Avoid Jackson versions and dependencies with known CVEs -- This message was sent by Atlassian JIRA (v7.6.14#76016)