GitHub user shimamoto opened a pull request:
https://github.com/apache/spark/pull/20233
[SPARK-23043][BUILD] Upgrade json4s to 3.5.3
## What changes were proposed in this pull request?
Spark still use a few years old version 3.2.11. This change is to upgrade
json4s to 3.5.3.
Note that this change does not include the Jackson update because the
Jackson version referenced in json4s 3.5.3 is 2.8.4, which has a security
vulnerability ([see](https://issues.apache.org/jira/browse/SPARK-20433)).
## How was this patch tested?
Existing unit tests and build.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/shimamoto/spark upgrade-json4s
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/spark/pull/20233.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #20233
----
commit e9cf6061a883abbee77ce50f5aa15416f7b86028
Author: shimamoto <chibochibo@...>
Date: 2018-01-10T12:51:40Z
Upgrade json4s to 3.5.3 version
----
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
