[HADOOP-12705] Upgrade Jackson 2.2.3 to 2.7.8

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.0
• Fix Version/s: 2.9.0, 3.0.0-alpha2
• Component/s: build
• Target Version/s: 2.9.0
• Hadoop Flags: Incompatible change

Release Note

We are sorry for causing pain for everyone for whom this Jackson update causes problems, but it was proving impossible to stay on the older version: too much code had moved past it, and by staying back we were limiting what Hadoop could do, and giving everyone who wanted an up to date version of Jackson a different set of problems. We've selected Jackson 2.7.8 as it fixed fix a security issue in XML parsing, yet proved compatible at the API level with the Hadoop codebase --and hopefully everything downstream.

• Assignee: Sean Mackrory
• Reporter: Steve Loughran
• Created: 13/Jan/16 16:42
• Updated: 12/Dec/16 04:11
• Resolved: 21/Nov/16 16:19

Description

There's no rush to do this; this is just the JIRA to track versions. However, without the upgrade, things written for Jackson 2.4.4 can break ( SPARK-12807)

being Jackson, this is a potentially dangerous update.

Issue Links

• is depended upon by: HADOOP-13050 Upgrade to AWS SDK 1.11.45
• is depended upon by: SPARK-12807 Spark External Shuffle not working in Hadoop clusters with Jackson 2.2.3
• is duplicated by: HADOOP-13662 Upgrade jackson2 version
• is related to: SPARK-14222 Cross-publish jackson-module-scala for Scala 2.12
• is related to: HDFS-11233 Fix javac warnings related to the deprecated APIs after upgrading Jackson
• is related to: HADOOP-13332 Remove jackson 1.9.13 and switch all jackson code to 2.x code line