[HADOOP-16619] Upgrade jackson and jackson-databind to 2.9.10

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0, 3.2.2
• Assignee: Siyao Meng
• Reporter: Siyao Meng
• Created: 30/Sep/19 21:10
• Updated: 10/Oct/19 21:08
• Resolved: 02/Oct/19 06:57

Description

Two more CVEs (CVE-2019-16335 and CVE-2019-14540) are addressed in jackson-databind 2.9.10.

For details see Jackson Release 2.9.10 release notes.

Issue Links

• depends upon: HADOOP-16533 Update jackson-databind to 2.9.9.3
• links to: GitHub Pull Request #1554