[PARQUET-1895] Update jackson-databind

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.0
• Fix Version/s: 1.12.0
• Component/s: parquet-mr
• Assignee: Gabor Szadovszky
• Reporter: Patrick OFriel
• Created: 06/Aug/20 20:27
• Updated: 13/Oct/20 09:49
• Resolved: 13/Oct/20 08:31

Description

The jackson databind 2.9.10.4 has the following CVEs:

https://nvd.nist.gov/vuln/detail/CVE-2020-14060
https://nvd.nist.gov/vuln/detail/CVE-2020-14061
https://nvd.nist.gov/vuln/detail/CVE-2020-14062
https://nvd.nist.gov/vuln/detail/CVE-2020-14195

They should be resolved if we update to 2.9.10.5