Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ZOOKEEPER-3750: update jackson-databind to address CVE-2020-9547, CVE… #1281

Closed
wants to merge 1 commit into from

Conversation

phunt
Copy link
Contributor

@phunt phunt commented Mar 8, 2020

…-2020-9548, CVE-2020-9546

Change-Id: I9574b086cf81c1d3e2715c867909347165047569

@phunt
Copy link
Contributor Author

phunt commented Mar 8, 2020

Doesn't looks like the release has been created yet (didn't notice till I created the patch). So consider a WIP until this compiles.

Copy link
Member

@ctubbsii ctubbsii left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a compatibility problem with 2.10? Why not update to that latest?

Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@eolivelli
Copy link
Contributor

Do you want to try to move to Jackson-jr ?

@phunt
Copy link
Contributor Author

phunt commented Mar 9, 2020

Good idea @ctubbsii - see #1283

@eolivelli eolivelli closed this Mar 14, 2020
@eolivelli
Copy link
Contributor

Superseded by #1283

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants