[HADOOP-16675] Upgrade jackson-databind to 2.9.10.1

• Type: Task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 3.3.0, 3.2.2
• Component/s: security
• Assignee: Lisheng Sun
• Reporter: Wei-Chiu Chuang
• Created: 29/Oct/19 11:31
• Updated: 15/Jan/20 06:20
• Resolved: 29/Oct/19 20:38

Description

Several net new CVEs were raised against jackson-databind 2.9.10.

CVE-2019-16942
CVE-2019-16943

2.9.10.1 is released, which I believe addresses these two CVEs.

Issue Links

• is related to: HADOOP-16803 Upgrade jackson-databind to 2.9.10.2