[
https://issues.apache.org/jira/browse/HBASE-22728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16902867#comment-16902867
]
Viraj Jasani commented on HBASE-22728:
--------------------------------------
Thanks [~apurtell] and [~busbey] for all your inputs.
{quote}hbase-rest requires Jackson functionality; include at 'compile' scope
instead of 'provided' so we are functional out of the box
{quote}
[~apurtell] as part of this Jira, considering removal of RemoteHTable can be
done later, would you prefer to have 'compile' scope for hbase-rest and
exclusions for all com.fasterxml.jackson* for hbase-rest dependency inside
hbase-examples?
I just tried it locally with the above exclusion, the build seems fine and this
is the dependency tree:
{code:java}
[INFO] --------------------< org.apache.hbase:hbase-rest >---------------------
[INFO] Building Apache HBase - Rest 1.5.0-SNAPSHOT [17/33]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.0.1:tree (default-cli) @ hbase-rest ---
[INFO] org.apache.hbase:hbase-rest:jar:1.5.0-SNAPSHOT
[INFO] +-
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.9.9:compile
[INFO] | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.9.9:compile
[INFO] | \-
com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.9.9:compile
[INFO] +- com.fasterxml.jackson.core:jackson-annotations:jar:2.9.9:compile
[INFO] +- com.fasterxml.jackson.core:jackson-core:jar:2.9.9:compile
[INFO] +- com.fasterxml.jackson.core:jackson-databind:jar:2.9.9.2:compile
[INFO] \- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13:test
[INFO] \- org.codehaus.jackson:jackson-core-asl:jar:1.9.13:test
[INFO]
{code}
{code:java}
[INFO] ------------------< org.apache.hbase:hbase-examples >-------------------
[INFO] Building Apache HBase - Examples 1.5.0-SNAPSHOT [21/33]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.0.1:tree (default-cli) @ hbase-examples ---
[INFO] org.apache.hbase:hbase-examples:jar:1.5.0-SNAPSHOT
[INFO] \- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13:test
[INFO] \- org.codehaus.jackson:jackson-core-asl:jar:1.9.13:test
[INFO]
{code}
> Upgrade jackson dependencies in branch-1
> ----------------------------------------
>
> Key: HBASE-22728
> URL: https://issues.apache.org/jira/browse/HBASE-22728
> Project: HBase
> Issue Type: Sub-task
> Affects Versions: 1.4.10, 1.3.5
> Reporter: Andrew Purtell
> Assignee: Viraj Jasani
> Priority: Major
> Fix For: 1.5.0, 1.3.6, 1.4.11
>
> Attachments: HBASE-22728.branch-1.01.patch,
> HBASE-22728.branch-1.02.patch, HBASE-22728.branch-1.04.patch,
> HBASE-22728.branch-1.06.patch, HBASE-22728.branch-1.10.patch,
> HBASE-22728.branch-1.11.patch, HBASE-22728.branch-1.12.patch
>
>
> Avoid Jackson versions and dependencies with known CVEs
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
