Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-3750

update jackson-databind to address CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Blocker
    • Resolution: Won't Do
    • 3.6.0, 3.7.0, 3.5.7
    • None
    • security

    Description

      owasp is flagging jackson-databind again due to CVE-2020-9547, CVE-2020-9548, CVE-2020-9546

      We need to update to 2.9.10.4

      Attachments

        Issue Links

          is fixed by

          Task - A task that needs to be done. ZOOKEEPER-3751 upgrade jackson-databind to 2.10 from 2.9

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is superceded by

          Task - A task that needs to be done. ZOOKEEPER-3751 upgrade jackson-databind to 2.10 from 2.9

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          links to

          Web Link GitHub Pull Request #1281

          Activity

            People

              phunt Patrick D. Hunt
              phunt Patrick D. Hunt
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h
                  1h