[SPARK-30333] Bump jackson-databind to 2.6.7.3

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.4
• Fix Version/s: 2.4.5
• Component/s: Spark Core
• Assignee: Sandeep Katta
• Reporter: Sandeep Katta
• Created: 23/Dec/19 12:02
• Updated: 17/Jan/20 19:01
• Resolved: 24/Dec/19 05:17

Description

To fix below CVE

 

CVE-2018-14718

CVE-2018-14719

CVE-2018-14720

CVE-2018-14721

CVE-2018-19360,

CVE-2018-19361

CVE-2018-19362

Issue Links

• links to: GitHub Pull Request #26986
• links to: GitHub Pull Request #27256