You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Nico Kruber (Jira)" <ji...@apache.org> on 2019/09/17 12:45:01 UTC

[jira] [Created] (FLINK-14104) Bump Jackson to 2.9.9.3

Nico Kruber created FLINK-14104:
-----------------------------------

             Summary: Bump Jackson to 2.9.9.3
                 Key: FLINK-14104
                 URL: https://issues.apache.org/jira/browse/FLINK-14104
             Project: Flink
          Issue Type: Bug
          Components: BuildSystem / Shaded
    Affects Versions: shaded-8.0, shaded-7.0
            Reporter: Nico Kruber
            Assignee: Nico Kruber


Our current Jackson version (2.9.8) is vulnerable for at least this CVE:
https://nvd.nist.gov/vuln/detail/CVE-2019-14379

Bumping to 2.9.9.3 should solve it.
See https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9



--
This message was sent by Atlassian Jira
(v8.3.2#803003)