You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Kevin Eveker (Jira)" <ji...@apache.org> on 2020/05/21 22:11:00 UTC
[jira] [Updated] (CASSANDRA-15827) Upgrade to Jackson Databind
2.9.10.4 or later to address CVEs
[ https://issues.apache.org/jira/browse/CASSANDRA-15827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kevin Eveker updated CASSANDRA-15827:
-------------------------------------
Impacts: Security (was: None)
> Upgrade to Jackson Databind 2.9.10.4 or later to address CVEs
> -------------------------------------------------------------
>
> Key: CASSANDRA-15827
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15827
> Project: Cassandra
> Issue Type: Improvement
> Reporter: Kevin Eveker
> Priority: Normal
>
> Recent scan results identified the following CVEs that require this upgrade to address
> CVE-2020-8840
> CVE-2020-9548
> CVE-2020-9547
> CVE-2020-9546
> CVE-2020-10673
> CVE-2020-10672
> CVE-2020-10968
> CVE-2020-10969
> CVE-2020-11112
> CVE-2020-11113
> CVE-2020-11111
> CVE-2020-11619
> CVE-2020-11620
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org