[HADOOP-16803] Upgrade jackson-databind to 2.9.10.2

• Type: Task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 3.3.0, 3.2.2
• Component/s: security
• Target Version/s: 3.3.0, 3.2.2
• Hadoop Flags: Reviewed
• Assignee: Masatake Iwasaki
• Reporter: Akira Ajisaka
• Created: 15/Jan/20 06:20
• Updated: 25/Feb/20 13:57
• Resolved: 15/Jan/20 10:56

Description

CVE-2019-20330 is reported and fixed in jackson-databind 2.9.10.2.
https://nvd.nist.gov/vuln/detail/CVE-2019-20330

Issue Links

• is related to: HADOOP-16882 Update jackson-databind to 2.9.10.2 in branch-3.1, branch-2.10
• relates to: HADOOP-16675 Upgrade jackson-databind to 2.9.10.1
• links to: GitHub Pull Request #1805