You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Anthony Wood (Jira)" <ji...@apache.org> on 2022/07/27 17:56:00 UTC

[jira] [Closed] (KARAF-7523) Upgrade to jackson 2.13.3

     [ https://issues.apache.org/jira/browse/KARAF-7523?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anthony Wood closed KARAF-7523.
-------------------------------
    Resolution: Duplicate

Duplicate of KARAF-7452

> Upgrade to jackson 2.13.3
> -------------------------
>
>                 Key: KARAF-7523
>                 URL: https://issues.apache.org/jira/browse/KARAF-7523
>             Project: Karaf
>          Issue Type: Dependency upgrade
>          Components: karaf
>            Reporter: Anthony Wood
>            Priority: Major
>             Fix For: 4.3.8, 4.4.2
>
>
> Vulnerability scanners are still flagging karaf due to jackson 2.13.2's vulnerability to CVE-2020-36518. That issue was fixed in [jackson 2.13.3|https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.3].



--
This message was sent by Atlassian Jira
(v8.20.10#820010)