You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@spark.apache.org by GitBox <gi...@apache.org> on 2019/08/14 08:33:23 UTC

[GitHub] [spark] Fokko opened a new pull request #25451: Bump Jackson Databind to 2.9.9.3

Fokko opened a new pull request #25451: Bump Jackson Databind to 2.9.9.3
URL: https://github.com/apache/spark/pull/25451
 
 
   Due to CVE's:
   https://www.cvedetails.com/vulnerability-list/vendor_id-15866/product_id-42991/version_id-238179/opec-1/Fasterxml-Jackson-databind-2.9.0.html
   
   ## What changes were proposed in this pull request?
   
   Update Jackson databind to the latest version.
   
   ## How was this patch tested?
   
   Compiled locally.
   
   (Please explain how this patch was tested. E.g. unit tests, integration tests, manual tests)
   (If this patch involves UI changes, please attach a screenshot; otherwise, remove this)
   
   Please review https://spark.apache.org/contributing.html before opening a pull request.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org