[JENA-1779] Update Jackson dependency to 2.10.0.

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Jena 3.13.1
• Fix Version/s: Jena 3.14.0
• Assignee: Andy Seaborne
• Reporter: Andy Seaborne
• Created: 10/Nov/19 17:32
• Updated: 19/Jan/20 18:18
• Resolved: 13/Nov/19 11:24

Description

CVE-2019-16942

Vulnerable versions: < jackson-databind-2.9.10.1
Patched version: jackson-databind-2.9.10.1

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.

Issue Links

• is related to: JENA-1762 Update Jackson dependency to 2.9.10 (core and databind)
• links to: GitHub Pull Request #629