[OOZIE-3650] upgrade jackson to 2.6.7 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 5.3.0
Component/s: None
Labels:
- patch-available

Description

Oozie currently has a dependency on an old version of Jackson (2.6.5) - https://github.com/apache/oozie/blob/master/pom.xml#L119

There are a number of CVEs open affecting this version.

https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.6.5

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

OOZIE-3650-003.patch
13/Jan/22 14:30
0.5 kB
PJ Fanning
OOZIE-3650-004.patch
13/Jan/22 15:14
0.9 kB
PJ Fanning

Activity

People

Assignee:: PJ Fanning

Reporter:: PJ Fanning

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 12/Jan/22 11:40

Updated:: 20/Jan/22 14:59

Resolved:: 20/Jan/22 14:56