You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Ismael Juma (Jira)" <ji...@apache.org> on 2019/09/29 17:27:00 UTC

[jira] [Commented] (KAFKA-8952) Vulnerabilities found for jackson-databind-2.9.9

    [ https://issues.apache.org/jira/browse/KAFKA-8952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16940495#comment-16940495 ] 

Ismael Juma commented on KAFKA-8952:
------------------------------------

Since the Guava issue is more complicated, I filed KAFKA-8959 for that. This issue is just about the Jackson dependency bump.

> Vulnerabilities found for jackson-databind-2.9.9
> ------------------------------------------------
>
>                 Key: KAFKA-8952
>                 URL: https://issues.apache.org/jira/browse/KAFKA-8952
>             Project: Kafka
>          Issue Type: New Feature
>    Affects Versions: 2.3.0
>            Reporter: Namrata Kokate
>            Assignee: Ismael Juma
>            Priority: Blocker
>             Fix For: 2.3.1
>
>
> I am currently using apache kafka latest version-2.3.0, however When I deployed the binary on the containers, I can see the vulnerability reported for the two jars - jackson-databind-2.9.9.jar and  guava-20.0.jar (filed KAFKA-8959 for the Guava part).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)