[CURATOR-552] Update jackson-databind dependencies

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.0
• Fix Version/s: TBD
• Component/s: General
• Assignee: Unassigned
• Reporter: Vladimir Pligin
• Created: 19/Dec/19 15:10
• Updated: 19/Dec/19 15:14
• Resolved: 19/Dec/19 15:14

Description

There are some CVE reports related to 2.9.8 and 2.9.9 versions, for example:

• CVE-2019-14379
• CVE-2019-17267
• CVE-2019-16335
• CVE-2019-14540
• CVE-2019-16943
• CVE-2019-16942
• CVE-2019-17531
• CVE-2019-14439
• CVE-2019-12086
• CVE-2019-12814
• CVE-2019-12384

Most of them suggest to update to the 2.9.10 version.