Details
Description
https://github.com/advisories/GHSA-x27m-9w8j-5vcw
https://github.com/jettison-json/jettison/releases
v1.5.2 is flagged as fixing a CVE but a v1.5.3 was quickly released and appears ti fix some regressions caused by v1.5.2.
Many hadoop tests fail when jettison 1.5.2 is used.
Attachments
Issue Links
- is related to
-
HADOOP-18676 Include jettison as direct dependency of hadoop-common
-
- Resolved
-
- relates to
-
HADOOP-18468 upgrade jettison json jar due to fix CVE-2022-40149
-
- Resolved
-
-
HADOOP-18689 Bump jettison from 1.5.3 to 1.5.4 in /hadoop-project
-
- Resolved
-
- links to