Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16485 Remove dependency on jackson
  3. HADOOP-16905

Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches

    XMLWordPrintableJSON

Details

    • Reviewed

    Description

      Jackson-databind 2.10 should relieve us from the endless CVE patches according to https://medium.com/@cowtowncoder/jackson-2-10-features-cd880674d8a2

      Not sure if this is an easy update, but i think we should do this in the Hadoop 3.3.0 and before removing jackson-databind entirely.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-17049 javax.activation-api and jakarta.activation-api define overlapping classes

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-17534 Upgrade Jackson databind to 2.10.5.1

          • Major - Major loss of function.
          • Resolved

          Task - A task that needs to be done. HIVE-24788 Backport HIVE-23338 to branch-3.1

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-17249 Upgrade jackson-databind to 2.9.10.6 on branch-2.10

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #1876

          Web Link GitHub Pull Request #1973

          Web Link GitHub Pull Request #1976

          Web Link GitHub Pull Request #3589

          Web Link GitHub Pull Request #3590

          Web Link GitHub Pull Request #3748

          Activity

            People

              weichiu Wei-Chiu Chuang
              weichiu Wei-Chiu Chuang
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 5h 10m
                  5h 10m