[CURATOR-481] Remove jackson-mapper-asl-version and update to latest version of jackson

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 4.2.0
• Component/s: General
• Assignee: Jordan Zimmerman
• Reporter: Maxim Pudov
• Created: 09/Oct/18 12:07
• Updated: 30/Jun/23 07:54
• Resolved: 03/Mar/19 19:15

Description

There is a vulnerability issue in jackson-mapper-asl-version 1.9.13 and it is no longer supported. The same issue was present in jackson-databind till version 2.7.9.1.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7525

We already have a dependency on jackson 2.x. Let's replace jackson-mapper-asl with jackson-databind and update jackson to the latest version.

 

 

Issue Links

• links to: GitHub Pull Request #280
• links to: GitHub Pull Request #280