[GEODE-7305] Update some dependecies due to security vulnerabilities

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: Mario Kevo
• Created: 16/Oct/19 07:33
• Updated: 04/Nov/22 13:07

Description

After some security vulnerability testing we found some issues. To avoid it we need to update:

Lucene: 6.6.2 -> 8.2.0

Jackson-databind:  2.9.8 -> 2.10.0

Apache Common Beanutils: 1.9.3 -> 1.9.4

Jetty: 9.4.12.v20180830 -> 9.4.21.v20190926 

 

Sub-Tasks

• Upgrade Jackson-databind from 2.9.8 to 2.10.0: Closed
• Upgrade Apache Common Beanutils from 1.9.3 to 1.9.4: Closed
• Upgrade Jetty from 9.4.12.v20180830 to 9.4.21.v20190926: Closed
• Upgrade Lucene from 6.6.2 to 8.2.0: In Progress