You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@zookeeper.apache.org by ar...@apache.org on 2022/03/31 18:23:24 UTC
[zookeeper] branch branch-3.6 updated: ZOOKEEPER-4505: CVE-2020-36518 - Upgrade jackson databind to 2.13.2.1
This is an automated email from the ASF dual-hosted git repository.
arshad pushed a commit to branch branch-3.6
in repository https://gitbox.apache.org/repos/asf/zookeeper.git
The following commit(s) were added to refs/heads/branch-3.6 by this push:
new 32b0f34 ZOOKEEPER-4505: CVE-2020-36518 - Upgrade jackson databind to 2.13.2.1
32b0f34 is described below
commit 32b0f34cd1e8f01dd2793fad6dfb5eae01b62ae0
Author: Edwin Hobor <ed...@gmail.com>
AuthorDate: Thu Mar 31 23:54:00 2022 +0530
ZOOKEEPER-4505: CVE-2020-36518 - Upgrade jackson databind to 2.13.2.1
CVE-2020-36518 vulnerability affects jackson-databind in Zookeeper (see https://github.com/advisories/GHSA-57j2-w4cx-62h2).
Upgrading to jackson-databind version 2.13.2.1 should address this issue.
Author: Edwin Hobor <ed...@gmail.com>
Reviewers: maoling <ma...@apache.org>,Enrico Olivelli <eo...@apache.org>, Mohammad Arshad <ar...@apache.org>
Closes #1846 from edwin092/edwin/ZOOKEEPER-4505-branch-3.6
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index f2478c8..36b320f 100755
--- a/pom.xml
+++ b/pom.xml
@@ -358,7 +358,7 @@
<netty.version>4.1.73.Final</netty.version>
<netty.tcnative.version>2.0.48.Final</netty.tcnative.version>
<jetty.version>9.4.43.v20210629</jetty.version>
- <jackson.version>2.13.1</jackson.version>
+ <jackson.version>2.13.2.1</jackson.version>
<json.version>1.1.1</json.version>
<jline.version>2.14.6</jline.version>
<snappy.version>1.1.7</snappy.version>