Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.3] Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (#4779) #4785

Merged
merged 1 commit into from
Oct 14, 2022

Conversation

mch2
Copy link
Member

@mch2 mch2 commented Oct 13, 2022

Signed-off-by: Andriy Redko andriy.redko@aiven.io

Signed-off-by: Andriy Redko andriy.redko@aiven.io
(cherry picked from commit 12f26d3)

Description

Backport #4779 to 1.3.
This branch did not have a changelog, so adds the entire file from 1.x with this change on top.

Issues Resolved

[List any issues this PR will resolve]

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff
  • Commit changes are listed out in CHANGELOG.md file (See: Changelog)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

…search-project#4779)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
(cherry picked from commit 12f26d3)
@mch2 mch2 changed the title Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (#4779) [Backport 1.3] Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (#4779) Oct 13, 2022
@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@mch2 mch2 merged commit 4f74fc3 into opensearch-project:1.3 Oct 14, 2022
@mch2 mch2 deleted the backport/backport-4779-to-1.3 branch October 14, 2022 00:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants