You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Karl Heinz Marbaise (Jira)" <ji...@apache.org> on 2022/08/06 13:17:00 UTC

[jira] [Updated] (MSHADE-418) Jackson-databind version is being picked as 2.12.6 instead of 2.12.6.1

     [ https://issues.apache.org/jira/browse/MSHADE-418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Karl Heinz Marbaise updated MSHADE-418:
---------------------------------------
    Fix Version/s: waiting-for-feedback

> Jackson-databind version is being picked as 2.12.6  instead of 2.12.6.1
> -----------------------------------------------------------------------
>
>                 Key: MSHADE-418
>                 URL: https://issues.apache.org/jira/browse/MSHADE-418
>             Project: Maven Shade Plugin
>          Issue Type: Bug
>    Affects Versions: 3.3.0
>            Reporter: Saikrishna Kosna
>            Priority: Major
>             Fix For: waiting-for-feedback
>
>         Attachments: pom.xml
>
>
> There was a security issue in jackson-databind, which needs to be upgraded to 2.12.6.1 version. When the version is updated and the Jar file is generated, the security issue still exists as part of the Jar file and the version is being shown as 2.12.6 instead of 2.12.6.1.  Attaching the pom.xml file, please let me know if I am doing something wrong.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)