[HBASE-22722] Upgrade jackson databind dependencies to 2.9.9.1

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1, 2.3.0, 2.0.6, 2.2.1, 2.1.6
• Component/s: dependencies
• Hadoop Flags: Reviewed

Release Note

Upgrade jackson databind dependency to 2.9.9.1 due to CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-12814

https://nvd.nist.gov/vuln/detail/CVE-2019-12384

• Assignee: Duo Zhang
• Reporter: Duo Zhang
• Created: 23/Jul/19 02:39
• Updated: 24/Jul/19 13:14
• Resolved: 24/Jul/19 02:25

Description

Due to

https://nvd.nist.gov/vuln/detail/CVE-2019-12814

https://nvd.nist.gov/vuln/detail/CVE-2019-12384

Issue Links

• relates to: HADOOP-16451 Update jackson-databind to 2.9.9.1
• links to: GitHub Pull Request #402

Sub-Tasks

• Upgrade jackson dependencies in branch-1: Closed