[TINKERPOP-2068] Bump Jackson Databind 2.9.7

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.3.4, 3.2.10
• Fix Version/s: 3.4.0, 3.3.5, 3.2.11
• Component/s: io
• Labels: security
• Assignee: Robert Dale
• Reporter: Robert Dale
• Created: 16/Oct/18 13:08
• Updated: 31/Oct/18 15:45
• Resolved: 31/Oct/18 15:45

Description

Jackson Databind vulnerability flagged by:

• https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
• https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
• https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
• https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448

Jackson Databind Release Notes:  https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7

 

Issue Links

• links to: GitHub Pull Request #969
• links to: GitHub Pull Request #970
• links to: GitHub Pull Request #979
• links to: GitHub Pull Request #980