[OOZIE-3172] Upgrade non-transitive Jackson dependencies from org.codehaus.jackson to com.fasterxml.jackson

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0.0b1
• Fix Version/s: 5.0.0
• Component/s: core
• Assignee: Andras Piros
• Reporter: Andras Piros
• Created: 29/Jan/18 13:15
• Updated: 22/Feb/19 13:21
• Resolved: 14/Feb/18 14:06

Description

Jackson 1.9.3 is way too old, and has several security vulnerabilities as well. Jackson 2.9.2 covers most of these.

Let's switch from org.codehaus.jackson to com.fasterxml.jackson in Oozie's direct (non-transitive) dependencies.

Issue Links

• is related to: OOZIE-3441 Upgrade jackson version to 2.6.5