Upgrade jackson Due to CVE-2022-42003 (StarRocks#21176)

Signed-off-by: Astralidea <astralidea@163.com>
huandzh · Apr 7, 2023 · 8175f50 · 8175f50
1 parent ff1fa25
commit 8175f50
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/fe/pom.xml b/fe/pom.xml
@@ -250,7 +250,7 @@ under the License.
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${jackson.version}.1</version>
+                <version>${jackson.version}.2</version>
             </dependency>
 
             <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml -->

diff --git a/fs_brokers/apache_hdfs_broker/pom.xml b/fs_brokers/apache_hdfs_broker/pom.xml
@@ -43,7 +43,7 @@ under the License.
         <thrift.version>0.14.1</thrift.version>
         <tomcat.version>8.5.70</tomcat.version>
         <log4j.version>2.17.1</log4j.version>
-        <jackson.version>2.13.4.1</jackson.version>
+        <jackson.version>2.13.4.2</jackson.version>
     </properties>
 
     <profiles>

diff --git a/java-extensions/hudi-reader/pom.xml b/java-extensions/hudi-reader/pom.xml
@@ -20,7 +20,7 @@
         <presto.hive.version>3.0.0-8</presto.hive.version>
         <hudi.version>0.12.2</hudi.version>
         <fasterxml.version>2.13.4</fasterxml.version>
-        <fasterxml.jackson.databind.version>2.13.4.1</fasterxml.jackson.databind.version>
+        <fasterxml.jackson.databind.version>2.13.4.2</fasterxml.jackson.databind.version>
         <esotericsoftware.kryo.shaded.version>4.0.2</esotericsoftware.kryo.shaded.version>
         <luben.zstd.jni.version>1.5.4-2</luben.zstd.jni.version>
     </properties>

diff --git a/java-extensions/udf-examples/pom.xml b/java-extensions/udf-examples/pom.xml
@@ -22,7 +22,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.13.4.1</version>
+            <version>2.13.4.2</version>
         </dependency>
 
     </dependencies>