[CASSANDRA-17460] Upgrade jackson-databind for CVE-2020-36518 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Sub-task
Status: Resolved
Priority: Normal
Resolution: Fixed
Fix Version/s: 4.0.4, 4.1-alpha1, 4.1
Component/s: Build
Labels:
None

Change Category:
Operability
Complexity:
Normal
Platform:

All
Impacts:

None
Source Control Link:

https://github.com/apache/cassandra/commit/b465fec7707555a1bfc8ac80fd655550b9e97f1f
Test and Documentation Plan:

Hide

run CI

Show
run CI

Description

jackson-databind-2.12.5.jar is vulnerable and should be upgraded.

Attachments

Activity

People

Assignee:: Brandon Williams

Reporter:: Brandon Williams

Authors:: Brandon Williams

Reviewers:: Berenguer Blasi

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 21/Mar/22 12:19

Updated:: 27/May/22 19:25

Resolved:: 22/Mar/22 12:33