You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@beam.apache.org by "Ismaël Mejía (JIRA)" <ji...@apache.org> on 2019/08/02 09:01:00 UTC

[jira] [Commented] (BEAM-7880) Upgrade Jackson to version 2.10.0.pr1

    [ https://issues.apache.org/jira/browse/BEAM-7880?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16898713#comment-16898713 ] 

Ismaël Mejía commented on BEAM-7880:
------------------------------------

This seems to be blocked at least until August 6 because the scala dependency (needed by the Spark runner) won't be published before.
https://github.com/FasterXML/jackson-module-scala/issues/419

> Upgrade Jackson to version 2.10.0.pr1
> -------------------------------------
>
>                 Key: BEAM-7880
>                 URL: https://issues.apache.org/jira/browse/BEAM-7880
>             Project: Beam
>          Issue Type: Improvement
>          Components: build-system, sdk-java-core
>            Reporter: Ismaël Mejía
>            Assignee: Ismaël Mejía
>            Priority: Major
>             Fix For: 2.15.0
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> Jackson 2.10.0.pr1 fixes two medium-rating security issues:
> https://www.cvedetails.com/cve/CVE-2019-12814
> https://www.cvedetails.com/cve/CVE-2019-12384



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)