[HBASE-26732] Update jackson to 2.13.1

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: thirdparty-4.1.0
• Component/s: security, thirdparty
• Hadoop Flags: Reviewed

Release Note

Upgrade jackson databind from 2.10.1 -> 2.13.1.

For addressing a possible Dos attack described in https://github.com/FasterXML/jackson-databind/issues/3328.

• Assignee: Andrew Kyle Purtell
• Reporter: Andrew Kyle Purtell
• Created: 04/Feb/22 20:07
• Updated: 08/Mar/22 20:04
• Resolved: 08/Mar/22 20:04

Description

Update jackson-databind to 2.13.1 to address a raised vulnerability that could possible DoS attack certain versions of Jackson. Please refer to https://github.com/FasterXML/jackson-databind/issues/3328 for further info.

Issue Links

• links to: GitHub Pull Request #74
• links to: GitHub Pull Request #4179