Home Explore Help
Sign In
apache
/
zookeeper
mirror of https://gitee.com/apache/zookeeper.git
2
0
Fork 0
Files Issues 0 Wiki
Browse Source

ZOOKEEPER-4045: CVE-2020-25649 - Upgrade jackson databind to 2.10.5.1

Jackson reported a vulnerability under CVE-2020-25649. Upgrading to 2.10.5.1 will resolve the problem. See https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10#micro-patches for more details.

Author: Edwin Hobor <edwin.hobor@microfocus.com>

Reviewers: Mate Szalay-Beko <symat@apache.org>, Norbert Kalmar <nkalmar@apache.org>

Closes #1572 from edwin092/ZOOKEEPER-4045

(cherry picked from commit 676d10b2fad97c69e4083619cb1db223ed1896a4)
Signed-off-by: Norbert Kalmar <nkalmar@apache.org>
(cherry picked from commit 29315f85d9c9c9857da00eb868af27bc082d398d)
Edwin Hobor 5 years ago
parent
78501764b0
commit
5ea966ab6a
1 changed files with 1 additions and 1 deletions
Unified View Show Diff Stats
  1. 1 1
      pom.xml

+ 1 - 1
pom.xml
View File 

@@ -299,7 +299,7 @@
 
     <commons-cli.version>1.2</commons-cli.version>
 
     <commons-cli.version>1.2</commons-cli.version>
 
     <jetty.version>9.4.35.v20201120</jetty.version>
 
     <jetty.version>9.4.35.v20201120</jetty.version>
 
     <netty.version>4.1.50.Final</netty.version>
 
     <netty.version>4.1.50.Final</netty.version>
 
-    <jackson.version>2.10.3</jackson.version>
 
+    <jackson.version>2.10.5.1</jackson.version>
 
     <json.version>1.1.1</json.version>
 
     <json.version>1.1.1</json.version>
 
     <jline.version>2.14.6</jline.version>
 
     <jline.version>2.14.6</jline.version>
 
     <snappy.version>1.1.7</snappy.version>
 
     <snappy.version>1.1.7</snappy.version>