[NIFI-8061] Update Jackson Databind Version

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.11.0, 1.12.0, 1.11.1, 1.11.2, 1.11.3, 1.11.4, 1.13.0, 1.12.1
• Fix Version/s: 1.14.0
• Labels: dependancy dependencies
• Flags: Patch
• Assignee: Unassigned
• Reporter: David Borncamp
• Created: 02/Dec/20 19:07
• Updated: 10/Dec/21 11:47
• Resolved: 10/Dec/21 11:47

Description

Upgrade com.fasterxml.jackson.core:jackson-databind in NiFi's maven poms to version 2.9.10.6. This resolves CVE 2020-25649 http://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-25649 with this issue fixed https://github.com/FasterXML/jackson-databind/issues/2826 .

Issue Links

• is fixed by: NIFI-8723 Upgrade Jackson to 2.12.3