You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@oozie.apache.org by "Andras Salamon (Jira)" <ji...@apache.org> on 2022/01/12 11:49:00 UTC
[jira] [Commented] (OOZIE-3650) upgrade jackson - ideally to v2.13.1
[ https://issues.apache.org/jira/browse/OOZIE-3650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17474470#comment-17474470 ]
Andras Salamon commented on OOZIE-3650:
---------------------------------------
Please check OOZIE-3441. The last time we tried to upgrade jackson this was the latest version working together with Spark 1.6
> upgrade jackson - ideally to v2.13.1
> ------------------------------------
>
> Key: OOZIE-3650
> URL: https://issues.apache.org/jira/browse/OOZIE-3650
> Project: Oozie
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
>
> Oozie currently has a dependency on an old version of Jackson (2.6.5) - [https://github.com/apache/oozie/blob/master/pom.xml#L119]
> There are a number of CVEs open affecting this version.
> https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.6.5
--
This message was sent by Atlassian Jira
(v8.20.1#820001)