[CASSANDRA-15867] Update Jackson version to 2.9.10.1 because there are security issues in 2.9.5

• Type: Task
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.11.7, 4.0-beta1, 4.0
• Component/s: Dependencies
• Change Category: Operability
• Complexity: Low Hanging Fruit
• Platform: All

Source Control Link

https://github.com/apache/cassandra/commit/259c63f18ee3b602bc42a700a8e9cac6629a332c

Test and Documentation Plan

run tests

• Assignee: Stefan Miklosovic
• Reporter: Stefan Miklosovic

Authors

Stefan Miklosovic

Reviewers

Brandon Williams

• Created: 10/Jun/20 05:33
• Updated: 03/Jan/21 17:03
• Resolved: 11/Jun/20 20:14

Description

Please see attached HTML report from OWASP dependency check for current 4.0-alpha5 trunk branch.

 

 

Issue Links

• causes: CASSANDRA-16234 Update NetBeans project file for dependency changes since 11th Feb 2020
• relates to: CASSANDRA-16056 Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172