You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by "Chia-Ping Tsai (Jira)" <ji...@apache.org> on 2026/09/28 16:16:00 UTC
[jira] [Commented] (KAFKA-21175) Update jackson to 2.21.7
[ https://issues.apache.org/jira/browse/KAFKA-21175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18120243#comment-18120243 ]
Chia-Ping Tsai commented on KAFKA-21175:
----------------------------------------
see https://lists.apache.org/thread/0ro53kprh0kjcdnzfrsfgptjblyrb7ct
> Update jackson to 2.21.7
> ------------------------
>
> Key: KAFKA-21175
> URL: https://issues.apache.org/jira/browse/KAFKA-21175
> Project: Kafka
> Issue Type: Improvement
> Reporter: Chia-Ping Tsai
> Assignee: Chia-Ping Tsai
> Priority: Minor
>
> Trunk is using 2.22.3, but that is a minor update which is not suitable for 4.4 since all we want is the CVE fixes (CVE-2026-91776, CVE-2026-91777, CVE-2026-89425, CVE-2026-89407). Hence, let's use 2.21.7 instead.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)