You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@parquet.apache.org by "botchniaque (via GitHub)" <gi...@apache.org> on 2023/03/02 09:40:45 UTC

[GitHub] [parquet-mr] botchniaque commented on pull request #1005: PARQUET-2198 : Updating jackson data bind version to fix CVEs

botchniaque commented on PR #1005:
URL: https://github.com/apache/parquet-mr/pull/1005#issuecomment-1451576518

   I don't have now any specifics, but I guess there were some differences in versions `2.13.x` and `2.14.x` and the scala versions compatibility. This may be the cause why `2.13.x` is used. But you're right - there are newer versions available eg. https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.13.5 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@parquet.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org