فهرست منبع

HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches (#3748)

(cherry picked from commit 69faaa1d58ad7de18a8dfa477531653a2c061568)

 Conflicts:
	hadoop-project/pom.xml

(cherry picked from commit bc6874139f534af81a83523cf10508d3d16a032f)
Akira Ajisaka 3 سال پیش
والد
کامیت
a7a85292ad
2فایلهای تغییر یافته به همراه9 افزوده شده و 2 حذف شده
  1. 7 0
      hadoop-client-modules/hadoop-client-runtime/pom.xml
  2. 2 2
      hadoop-project/pom.xml

+ 7 - 0
hadoop-client-modules/hadoop-client-runtime/pom.xml

@@ -334,6 +334,13 @@
                         <exclude>**/pom.xml</exclude>
                       </excludes>
                     </relocation>
+                    <relocation>
+                      <pattern>javax/xml/bind/</pattern>
+                      <shadedPattern>${shaded.dependency.prefix}.javax.xml.bind.</shadedPattern>
+                      <excludes>
+                        <exclude>**/pom.xml</exclude>
+                      </excludes>
+                    </relocation>
                     <relocation>
                       <pattern>net/</pattern>
                       <shadedPattern>${shaded.dependency.prefix}.net.</shadedPattern>

+ 2 - 2
hadoop-project/pom.xml

@@ -69,8 +69,8 @@
 
     <!-- jackson versions -->
     <jackson.version>1.9.13</jackson.version>
-    <jackson2.version>2.9.10</jackson2.version>
-    <jackson2.databind.version>2.9.10.4</jackson2.databind.version>
+    <jackson2.version>2.10.3</jackson2.version>
+    <jackson2.databind.version>2.10.3</jackson2.databind.version>
 
     <!-- httpcomponents versions -->
     <httpclient.version>4.5.13</httpclient.version>