You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by iw...@apache.org on 2020/03/07 03:18:31 UTC
[hadoop] branch trunk updated: HADOOP-16905. Update
jackson-databind to 2.10.3 to relieve us from the endless CVE patches.
(#1876)
This is an automated email from the ASF dual-hosted git repository.
iwasakims pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/trunk by this push:
new 69faaa1 HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches. (#1876)
69faaa1 is described below
commit 69faaa1d58ad7de18a8dfa477531653a2c061568
Author: Wei-Chiu Chuang <we...@apache.org>
AuthorDate: Fri Mar 6 19:18:01 2020 -0800
HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches. (#1876)
---
hadoop-client-modules/hadoop-client-runtime/pom.xml | 7 +++++++
hadoop-project/pom.xml | 4 ++--
2 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/hadoop-client-modules/hadoop-client-runtime/pom.xml b/hadoop-client-modules/hadoop-client-runtime/pom.xml
index 552cd9c..4960235 100644
--- a/hadoop-client-modules/hadoop-client-runtime/pom.xml
+++ b/hadoop-client-modules/hadoop-client-runtime/pom.xml
@@ -340,6 +340,13 @@
</excludes>
</relocation>
<relocation>
+ <pattern>javax/xml/bind/</pattern>
+ <shadedPattern>${shaded.dependency.prefix}.javax.xml.bind.</shadedPattern>
+ <excludes>
+ <exclude>**/pom.xml</exclude>
+ </excludes>
+ </relocation>
+ <relocation>
<pattern>net/</pattern>
<shadedPattern>${shaded.dependency.prefix}.net.</shadedPattern>
<excludes>
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 2f87170..a390e71 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -71,8 +71,8 @@
<!-- jackson versions -->
<jackson.version>1.9.13</jackson.version>
- <jackson2.version>2.9.10</jackson2.version>
- <jackson2.databind.version>2.9.10.3</jackson2.databind.version>
+ <jackson2.version>2.10.3</jackson2.version>
+ <jackson2.databind.version>2.10.3</jackson2.databind.version>
<!-- httpcomponents versions -->
<httpclient.version>4.5.6</httpclient.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org