Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16451

Update jackson-databind to 2.9.9.1

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 3.3.0, 3.2.2
    • None
    • None

    Description

      https://nvd.nist.gov/vuln/detail/CVE-2019-12814
      CVE-2019-12814 flags 2.9.9 as vulnerable. A new version 2.9.9.1 is available.

      Attachments

        1. HADOOP-16451.002.patch
          2 kB
          Siyao Meng
        2. HADOOP-16451.001.patch
          2 kB
          Siyao Meng

        Issue Links

        depends upon

        Task - A task that needs to be done. HADOOP-16365 Upgrade jackson-databind to 2.9.9

        • Major - Major loss of function.
        • Resolved
        is related to

        Bug - A problem which impairs or prevents the functions of the product. HBASE-22722 Upgrade jackson databind dependencies to 2.9.9.1

        • Blocker - Blocks development and/or testing work, production could not run
        • Resolved

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-16487 Update jackson-databind to 2.9.9.2

        • Critical - Crashes, loss of data, severe memory leak.
        • Resolved
        relates to

        Improvement - An improvement or enhancement to an existing feature or task. HADOOP-16485 Remove dependency on jackson

        • Major - Major loss of function.
        • Open
        links to

        Web Link CVE-2019-12814

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            smeng Siyao Meng
            weichiu Wei-Chiu Chuang
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment