[CASSANDRA-15867] Update Jackson version to 2.9.10.1 because there are security issues in 2.9.5 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Task
Status: Resolved
Priority: Normal
Resolution: Fixed
Fix Version/s: 3.11.7, 4.0-beta1, 4.0
Component/s: Dependencies
Labels:
None

Change Category:
Operability
Complexity:
Low Hanging Fruit
Platform:

All
Impacts:

None
Source Control Link:

https://github.com/apache/cassandra/commit/259c63f18ee3b602bc42a700a8e9cac6629a332c
Test and Documentation Plan:

Hide

run tests

Show
run tests

Description

Please see attached HTML report from OWASP dependency check for current 4.0-alpha5 trunk branch.

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

dependency-check-report.html
10/Jun/20 05:33
787 kB
Stefan Miklosovic

Issue Links

causes

CASSANDRA-16234 Update NetBeans project file for dependency changes since 11th Feb 2020

Resolved

relates to

CASSANDRA-16056 Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172

Resolved

Activity

People

Assignee:: Stefan Miklosovic

Reporter:: Stefan Miklosovic

Authors:: Stefan Miklosovic

Reviewers:: Brandon Williams

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 10/Jun/20 05:33

Updated:: 03/Jan/21 17:03

Resolved:: 11/Jun/20 20:14

Time Tracking

Estimated:

Not Specified

Remaining:

0h

Logged:

10m