[HIVE-24816] Upgrade jackson to 2.10.5.1 or 2.11.0+ due to CVE-2020-25649

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-1
• Component/s: HiveServer2
• Labels: pull-request-available release-3.1.3
• Assignee: Sai Hemanth Gantasala
• Reporter: Sai Hemanth Gantasala
• Created: 24/Feb/21 01:38
• Updated: 02/Apr/23 19:59
• Resolved: 12/Oct/21 21:48

Description

Currently, hive is pulling Jackson 2.10.5 version jar. Please upgrade to 2.10.5.1 or 2.11.0+ due to CVE-2020-25649.

Issue Links

• fixes: HIVE-27210 Backport HIVE-23338: Bump jackson version to 2.10.0 in branch-3
• links to: GitHub Pull Request #2011
• links to: GitHub Pull Request #2075