Wenzhe Zhou has uploaded this change for review. ( http://gerrit.cloudera.org:8080/17085
Change subject: IMPALA-10516: Bump up the versions of jackson databind and slf4j ...................................................................... IMPALA-10516: Bump up the versions of jackson databind and slf4j A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This patch bumps up jackson databind to 2.10.5.1. It also changes slf4j to 1.7.30. Testing: - Built Impala on local machine as clean build. Verified that new versions of jar files jackson-databind-2.10.5.1.jar, slf4j-api-1.7.30.jar, and slf4j-log4j12-1.7.30.jar were built in fe/target/build-classpath.txt. Change-Id: Ie7b84a90fec955dbaebd36b63294229b05eb00d8 --- M java/pom.xml 1 file changed, 2 insertions(+), 2 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/85/17085/1 -- To view, visit http://gerrit.cloudera.org:8080/17085 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: Ie7b84a90fec955dbaebd36b63294229b05eb00d8 Gerrit-Change-Number: 17085 Gerrit-PatchSet: 1 Gerrit-Owner: Wenzhe Zhou <[email protected]> Gerrit-Reviewer: Aman Sinha <[email protected]> Gerrit-Reviewer: Joe McDonnell <[email protected]>
