[ZOOKEEPER-3750] update jackson-databind to address CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Won't Do
• Affects Version/s: 3.6.0, 3.7.0, 3.5.7
• Component/s: security
• Labels: pull-request-available
• Assignee: Patrick D. Hunt
• Reporter: Patrick D. Hunt
• Created: 08/Mar/20 02:19
• Updated: 30/Apr/20 10:19
• Resolved: 30/Apr/20 10:19

Description

owasp is flagging jackson-databind again due to CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

We need to update to 2.9.10.4

Issue Links

• is fixed by: ZOOKEEPER-3751 upgrade jackson-databind to 2.10 from 2.9
• is superceded by: ZOOKEEPER-3751 upgrade jackson-databind to 2.10 from 2.9
• links to: GitHub Pull Request #1281