You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kafka.apache.org by jy...@apache.org on 2026/09/27 14:32:09 UTC
(kafka) branch trunk updated: KAFKA-21157: Bump Jackson version to 2.22.3 (#23580)
This is an automated email from the ASF dual-hosted git repository.
m1a2st pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git
The following commit(s) were added to refs/heads/trunk by this push:
new c898d1c8c3d KAFKA-21157: Bump Jackson version to 2.22.3 (#23580)
c898d1c8c3d is described below
commit c898d1c8c3d8d0581a2dc1e3c638b64d4ea7a725
Author: Gergely Harmadas <54...@users.noreply.github.com>
AuthorDate: Sun Sep 27 16:32:01 2026 +0200
KAFKA-21157: Bump Jackson version to 2.22.3 (#23580)
There is a new jackson patch release
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.22.3
Fixes CVEs:
[CVE-2026-89407](https://www.cve.org/CVERecord?id=CVE-2026-89407)
[CVE-2026-89425](https://www.cve.org/CVERecord?id=CVE-2026-89425)
[CVE-2026-91776](https://www.cve.org/CVERecord?id=CVE-2026-91776)
[CVE-2026-91777](https://www.cve.org/CVERecord?id=CVE-2026-91777)
Reviewers: Ken Huang <s7...@gmail.com>
---
LICENSE-binary | 18 +++++++++---------
gradle/dependencies.gradle | 2 +-
2 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index 88704f1a513..c26701f0f4c 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -214,15 +214,15 @@ License Version 2.0:
- commons-validator-1.10.1
- hash4j-0.22.0
- jackson-annotations-2.22
-- jackson-core-2.22.2
-- jackson-databind-2.22.2
-- jackson-dataformat-csv-2.22.2
-- jackson-dataformat-yaml-2.22.2
-- jackson-datatype-jdk8-2.22.2
-- jackson-jakarta-rs-base-2.22.2
-- jackson-jakarta-rs-json-provider-2.22.2
-- jackson-module-blackbird-2.22.2
-- jackson-module-jakarta-xmlbind-annotations-2.22.2
+- jackson-core-2.22.3
+- jackson-databind-2.22.3
+- jackson-dataformat-csv-2.22.3
+- jackson-dataformat-yaml-2.22.3
+- jackson-datatype-jdk8-2.22.3
+- jackson-jakarta-rs-base-2.22.3
+- jackson-jakarta-rs-json-provider-2.22.3
+- jackson-module-blackbird-2.22.3
+- jackson-module-jakarta-xmlbind-annotations-2.22.3
- jakarta.inject-api-2.0.1
- jakarta.validation-api-3.0.2
- javassist-3.30.2-GA
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index 6c9d57d295b..abc1987abee 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -62,7 +62,7 @@ versions += [
gradle: "9.7.1",
grgit: "5.3.3",
httpclient: "4.5.14",
- jackson: "2.22.2",
+ jackson: "2.22.3",
jacksonAnnotations: "2.22",
jacoco: "0.8.15",
javassist: "3.30.2-GA",