[ https://issues.apache.org/jira/browse/HDFS-15189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17043376#comment-17043376 ]
angerszhu commented on HDFS-15189: ---------------------------------- cc [~hexiaoqiao] can you help to ping some one who familiar to this? > update jackon-databind version > ------------------------------ > > Key: HDFS-15189 > URL: https://issues.apache.org/jira/browse/HDFS-15189 > Project: Hadoop HDFS > Issue Type: Improvement > Reporter: angerszhu > Priority: Major > > according to > [CVE-2020-8840|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840], > maybe we should update jackson-databind to 2.9.10.3 or 2.10.x?* -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org