You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@asterixdb.apache.org by AsterixDB Code Review <do...@asterix-gerrit.ics.uci.edu> on 2026/10/08 03:40:06 UTC
[S] Change in asterixdb-clients[master]: [NO ISSUE][JDBC] Update Jackson to 2.21.7 via jackson-bom
From Ritik Raj <ri...@couchbase.com>:
Hello Jenkins,
I'd like you to reexamine a change. Please visit
https://asterix-gerrit.ics.uci.edu/c/asterixdb-clients/+/22012?usp=email
to look at the new patch set (#2).
The following approvals got outdated and were removed:
Verified+1 by Jenkins
Change subject: [NO ISSUE][JDBC] Update Jackson to 2.21.7 via jackson-bom
......................................................................
[NO ISSUE][JDBC] Update Jackson to 2.21.7 via jackson-bom
Jackson 2.19.4 has known CVEs (e.g. CVE-2026-89407, CVE-2026-89425,
CVE-2026-91776) and no 2.19.x release fixes them. Move to 2.21.7.
Import jackson-bom instead of managing jackson-core, -databind and
-annotations separately: since 2.20, jackson-annotations is versioned
major.minor only, so it can no longer follow the jackson-core version.
The BOM keeps the three aligned.
Change-Id: I00664ba7e80275aabb4722d3e0ebaab1de08b39f
---
M asterixdb-jdbc/pom.xml
1 file changed, 6 insertions(+), 16 deletions(-)
git pull ssh://asterix-gerrit.ics.uci.edu:29418/asterixdb-clients refs/changes/12/22012/2
--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb-clients/+/22012?usp=email
To unsubscribe, or for help writing mail filters, visit https://asterix-gerrit.ics.uci.edu/settings?usp=email
Gerrit-MessageType: newpatchset
Gerrit-Project: asterixdb-clients
Gerrit-Branch: master
Gerrit-Change-Id: I00664ba7e80275aabb4722d3e0ebaab1de08b39f
Gerrit-Change-Number: 22012
Gerrit-PatchSet: 2
Gerrit-Owner: Ritik Raj <ri...@couchbase.com>
Gerrit-Reviewer: Jenkins <je...@fulliautomatix.ics.uci.edu>