Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-4628

CVE-2022-42003 CVE-2022-42004 HIGH: upgrade jackson-databind-2.13.3.jar to 2.13.4.1

    XMLWordPrintableJSON

Details

    • Task
    • Status: Resolved
    • Critical
    • Resolution: Duplicate
    • 3.5.10, 3.8.0, 3.7.1
    • None
    • security

    Description

      Two High issues 

      https://nvd.nist.gov/vuln/detail/CVE-2022-42003

      https://nvd.nist.gov/vuln/detail/CVE-2022-42004

      affect jackson version 2.13.3 which zk should update to 2.13.4.1 

      Other projects have done this, but Zookeeper has not.

      Attachments

        Issue Links

          Blocked

          Test - A new unit, integration or system test. ZOOKEEPER-4333 QuorumSSLTest - testOCSP fails on JDK17

          • Major - Major loss of function.
          • Resolved
          duplicates

          Improvement - An improvement or enhancement to an existing feature or task. ZOOKEEPER-4661 Upgrade Jackson Databind to 2.13.4.2 for CVE-2022-42003 CVE-2022-42004

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed
          is related to

          Task - A task that needs to be done. ZOOKEEPER-4627 High CVE-2022-2048 in jetty-*-9.4.46.v20220331.jar fixed in 9.4.47

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          links to

          Web Link GitHub Pull Request #1940

          Activity

            People

              Unassigned Unassigned
              ivodujmovic Ivo Dujmovic
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 40m
                  40m