[jira] [Commented] (UNOMI-491) Upgrade Jackson version

["Serge Huber (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/UNOMI-491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17414817#comment-17414817 ] 

Serge Huber commented on UNOMI-491:
-----------------------------------

I tried to upgrade Jackson but I also had to upgrade CXF because of that. 

I also upgraded Karaf at the same time to fix some problems with the GraphQL version of Pax Web that was not compatible with the one provided by Karaf. 

This also required upgrading the JAXB API version because Jackson's JAXB annotation required it. 

Unfortunately we couldn't upgrade to more recent versions of CXF because of this issue: https://issues.apache.org/jira/browse/CXF-8593

And we couldn't upgrade to a more recent version of GraphQL because of this issue: 
https://github.com/Enigmatis/graphql-java-annotations/issues/283

I will create another ticket to remember to upgrade everything (including Karaf) to the latest versions once the above issues are fixed and released.

> Upgrade Jackson version
> -----------------------
>
>                 Key: UNOMI-491
>                 URL: https://issues.apache.org/jira/browse/UNOMI-491
>             Project: Apache Unomi
>          Issue Type: Bug
>          Components: core, web
>    Affects Versions: 1.5.6
>            Reporter: Serge Huber
>            Assignee: Serge Huber
>            Priority: Major
>             Fix For: 1.6.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> We should upgrade Jackson to a more secure one.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)