[HIVE-26300] Upgrade Jackson databind version to 2.12.6.1+ to avoid CVE-2020-36518

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-2
• Component/s: Hive
• Labels: hive-3.2.0-must pull-request-available
• Target Version/s: 3.2.0
• Assignee: Sai Hemanth Gantasala
• Reporter: Sai Hemanth Gantasala
• Created: 08/Jun/22 14:50
• Updated: 01/Dec/22 09:32
• Resolved: 09/Jun/22 12:07

Description

Upgrade Jackson databind version to 2.12.6.1+ to avoid CVE-2020-36518

Issue Links

• Is contained by: HIVE-26749 CVE Upgrades for 3.2.0 release
• Is contained by: HIVE-26751 Bug Fixes and Improvements for 3.2.0 release
• links to: GitHub Pull Request #3351