Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-15994

Upgrade Jackson2 to 2.9.8

Log workAgile BoardRank to TopRank to BottomAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.3.0, 3.2.1
    • Component/s: security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      Now Jackson 2.9.5 is used and it is vulnerable (CVE-2018-11307). Let's upgrade to the latest version.

        Attachments

        1. HADOOP-15994-001.patch
          0.6 kB
          lqjacklee
        2. HADOOP-15994-002.patch
          0.6 kB
          lqjacklee
        3. HADOOP-15994-003.patch
          0.6 kB
          lqjacklee
        4. 460.patch
          1 kB
          Akira Ajisaka

        Issue Links

        is duplicated by

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-16198 Upgrade Jackson-databind version to 2.9.8

        • Major - Major loss of function.
        • Resolved
        relates to

        Improvement - An improvement or enhancement to an existing feature or task. HADOOP-9991 Fix up Hadoop POMs, roll up JARs to latest versions

        • Major - Major loss of function.
        • Open

        Task - A task that needs to be done. HADOOP-15482 Upgrade jackson-databind to version 2.9.5

        • Major - Major loss of function.
        • Resolved

          Activity
          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment