You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@zookeeper.apache.org by nk...@apache.org on 2020/01/23 10:17:09 UTC

[zookeeper] branch branch-3.5 updated: ZOOKEEPER-3699: upgrade jackson-databind to address CVE-2019-20330

This is an automated email from the ASF dual-hosted git repository.

nkalmar pushed a commit to branch branch-3.5
in repository https://gitbox.apache.org/repos/asf/zookeeper.git


The following commit(s) were added to refs/heads/branch-3.5 by this push:
     new bf0474a  ZOOKEEPER-3699: upgrade jackson-databind to address CVE-2019-20330
bf0474a is described below

commit bf0474a2dba33dc3595a4f560d563af2c7f9c48a
Author: Patrick Hunt <ph...@apache.org>
AuthorDate: Thu Jan 23 11:14:39 2020 +0100

    ZOOKEEPER-3699: upgrade jackson-databind to address CVE-2019-20330
    
    Latest version of jackson-databind is 2.9.10.2.
    
    Change-Id: Id2b0f17c2dfa9a9765fd4893643007b49f06816d
    
    Author: Patrick Hunt <ph...@apache.org>
    
    Reviewers: Norbert Kalmar <nk...@apache.org>
    
    Closes #1232 from phunt/ZOOKEEPER-3699
    
    (cherry picked from commit 2d29c569f2c3ca879e1d026a7086f6e376187198)
    Signed-off-by: Norbert Kalmar <nk...@apache.org>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 5bea928..1b14b86 100755
--- a/pom.xml
+++ b/pom.xml
@@ -279,7 +279,7 @@
     <commons-cli.version>1.2</commons-cli.version>
     <jetty.version>9.4.24.v20191120</jetty.version>
     <netty.version>4.1.42.Final</netty.version>
-    <jackson.version>2.9.10.1</jackson.version>
+    <jackson.version>2.9.10.2</jackson.version>
     <json.version>1.1.1</json.version>
     <jline.version>2.11</jline.version>
     <snappy.version>1.1.7</snappy.version>