[CALCITE-5115] Upgrade jackson-databind from 2.9.10.1 to 2.13.2.1, and jackson from 2.10.0 to 2.13.2.1

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.30.0
• Fix Version/s: 1.31.0
• Component/s: core
• Labels: pull-request-available
• Assignee: Julian Hyde
• Reporter: Florian Brams
• Created: 26/Apr/22 13:52
• Updated: 03/Aug/22 16:21
• Resolved: 26/Apr/22 22:29

Description

Upgrading jackson-databind is required to fix CVE-2020-36518; the fix requires jackson-databind version 2.12.6.1, or 2.13.2.1 or greater.

Issue Links

• is related to: CALCITE-3258 Upgrade jackson-databind from 2.9.9 to 2.9.9.3, and kafka-clients from 2.0.0 to 2.1.1
• links to: GitHub Pull Request #2780