You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@zookeeper.apache.org by "PDavid (via GitHub)" <gi...@apache.org> on 2026/08/31 09:37:48 UTC
[PR] ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities [zookeeper]
PDavid opened a new pull request, #2447:
URL: https://github.com/apache/zookeeper/pull/2447
(no comment)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities [zookeeper]
Posted by "PDavid (via GitHub)" <gi...@apache.org>.
PDavid commented on PR #2447:
URL: https://github.com/apache/zookeeper/pull/2447#issuecomment-5476761268
It seems `org.apache.zookeeper.server.ServerCnxnFactoryTest.testShedConnections_SmallPercentageRoundsToZero{FactoryType}[2]` failed in Jenkins:
```
org.opentest4j.AssertionFailedError: 1% of 1 connection should round to 0 ==> expected: <0> but was: <1>
at org.apache.zookeeper.server.ServerCnxnFactoryTest.testShedConnections_SmallPercentageRoundsToZero(ServerCnxnFactoryTest.java:106)
```
However it is successful for me locally on this branch:
```
[INFO]
[INFO] -------------------------------------------------------
[INFO] T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.zookeeper.server.ServerCnxnFactoryTest
[INFO] Tests run: 10, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.06 s - in org.apache.zookeeper.server.ServerCnxnFactoryTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 10, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 8.729 s
[INFO] Finished at: 2026-08-31T11:58:41+02:00
[INFO] ------------------------------------------------------------------------
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities [zookeeper]
Posted by "phunt (via GitHub)" <gi...@apache.org>.
phunt commented on code in PR #2447:
URL: https://github.com/apache/zookeeper/pull/2447#discussion_r3898824273
##########
pom.xml:
##########
@@ -550,7 +550,7 @@
<jetty.version>12.1.12</jetty.version>
<!-- Servlet API version required by Jetty EE10 (see ee10.jakarta.servlet.api.version in jetty-ee10) -->
<jakarta.servlet.version>6.0.0</jakarta.servlet.version>
- <jackson.version>2.18.8</jackson.version>
Review Comment:
lgtm +1
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities [zookeeper]
Posted by "anmolnar (via GitHub)" <gi...@apache.org>.
anmolnar merged PR #2447:
URL: https://github.com/apache/zookeeper/pull/2447
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org