You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Sandeep Katta (Jira)" <ji...@apache.org> on 2019/12/23 12:03:00 UTC

[jira] [Created] (SPARK-30333) Bump jackson-databind to 2.6.7.3

Sandeep Katta created SPARK-30333:
-------------------------------------

             Summary: Bump  jackson-databind to 2.6.7.3 
                 Key: SPARK-30333
                 URL: https://issues.apache.org/jira/browse/SPARK-30333
             Project: Spark
          Issue Type: Bug
          Components: Spark Core
    Affects Versions: 2.4.4
            Reporter: Sandeep Katta


To fix below CVE

 

CVE-2018-14718

CVE-2018-14719

CVE-2018-14720

CVE-2018-14721

CVE-2018-19360,

CVE-2018-19361

CVE-2018-19362



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org