[GEODE-7255] Need to pick up CVE-2019-16942

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.11.0
• Component/s: core
• Assignee: Mark Hanson
• Reporter: Mark Hanson
• Created: 30/Sep/19 17:42
• Updated: 30/Dec/19 18:49
• Resolved: 30/Sep/19 17:46

Description

There is a CVE out on Jackson versions before 2.10.0... We need to upgrade to 2.10.0 to get a fix.

see CVE-2019-16942

Issue Links

• is duplicated by: GEODE-7264 Jackson-databind vulnerabilities
• relates to: GEODE-7306 Upgrade Jackson-databind from 2.9.8 to 2.10.0
• relates to: GEODE-7264 Jackson-databind vulnerabilities
• links to: GitHub Pull Request #4102