ODIn/spark-instrumented-optimizer
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

[SPARK-27757][CORE] Bump Jackson to 2.9.9

Browse source 
## What changes were proposed in this pull request?

This fixes CVE-2019-12086 on Databind: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9

## How was this patch tested?

Existing tests

Closes #24646 from Fokko/SPARK-27757.

Authored-by: Fokko Driesprong <fokko@apache.org>
Signed-off-by: Sean Owen <sean.owen@databricks.com>
This commit is contained in:
Fokko Driesprong 2019-05-30 09:35:20 -05:00 committed by Sean Owen
parent 6748b486a9
commit bd87323003
3 changed files with 15 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
dev/deps/spark-deps-hadoop-2.7
View file

@ -83,16 +83,16 @@ httpclient-4.5.6.jar
httpcore-4.4.10.jar
istack-commons-runtime-3.0.8.jar
ivy-2.4.0.jar
jackson-annotations-2.9.8.jar
jackson-core-2.9.8.jar
jackson-annotations-2.9.9.jar
jackson-core-2.9.9.jar
jackson-core-asl-1.9.13.jar
jackson-databind-2.9.8.jar
jackson-dataformat-yaml-2.9.8.jar
jackson-databind-2.9.9.jar
jackson-dataformat-yaml-2.9.9.jar
jackson-jaxrs-1.9.13.jar
jackson-mapper-asl-1.9.13.jar
jackson-module-jaxb-annotations-2.9.8.jar
jackson-module-paranamer-2.9.8.jar
jackson-module-scala_2.12-2.9.8.jar
jackson-module-jaxb-annotations-2.9.9.jar
jackson-module-paranamer-2.9.9.jar
jackson-module-scala_2.12-2.9.9.jar
jackson-xc-1.9.13.jar
jakarta.xml.bind-api-2.3.2.jar
janino-3.0.11.jar

14
dev/deps/spark-deps-hadoop-3.2
View file

@ -85,17 +85,17 @@ httpclient-4.5.6.jar
httpcore-4.4.10.jar
istack-commons-runtime-3.0.8.jar
ivy-2.4.0.jar
jackson-annotations-2.9.8.jar
jackson-core-2.9.8.jar
jackson-annotations-2.9.9.jar
jackson-core-2.9.9.jar
jackson-core-asl-1.9.13.jar
jackson-databind-2.9.8.jar
jackson-dataformat-yaml-2.9.8.jar
jackson-databind-2.9.9.jar
jackson-dataformat-yaml-2.9.9.jar
jackson-jaxrs-base-2.9.5.jar
jackson-jaxrs-json-provider-2.9.5.jar
jackson-mapper-asl-1.9.13.jar
jackson-module-jaxb-annotations-2.9.8.jar
jackson-module-paranamer-2.9.8.jar
jackson-module-scala_2.12-2.9.8.jar
jackson-module-jaxb-annotations-2.9.9.jar
jackson-module-paranamer-2.9.9.jar
jackson-module-scala_2.12-2.9.9.jar
jakarta.xml.bind-api-2.3.2.jar
janino-3.0.11.jar
javassist-3.18.1-GA.jar

2
pom.xml
View file

@ -166,7 +166,7 @@
<!-- for now, not running scalafmt as part of default verify pipeline -->
<scalafmt.skip>true</scalafmt.skip>
<codehaus.jackson.version>1.9.13</codehaus.jackson.version>
<fasterxml.jackson.version>2.9.8</fasterxml.jackson.version>
<fasterxml.jackson.version>2.9.9</fasterxml.jackson.version>
<snappy.version>1.1.7.3</snappy.version>
<netlib.java.version>1.1.2</netlib.java.version>
<commons-codec.version>1.10</commons-codec.version>