Apache
/
hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches. (#1876)

This commit is contained in:
Wei-Chiu Chuang 2020-03-06 19:18:01 -08:00 committed by GitHub
parent 4062217189
commit 69faaa1d58
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hadoop-client-modules/hadoop-client-runtime/pom.xml
View File

@ -339,6 +339,13 @@
<exclude>**/pom.xml</exclude>
</excludes>
</relocation>
<relocation>
<pattern>javax/xml/bind/</pattern>
<shadedPattern>${shaded.dependency.prefix}.javax.xml.bind.</shadedPattern>
<excludes>
<exclude>**/pom.xml</exclude>
</excludes>
</relocation>
<relocation>
<pattern>net/</pattern>
<shadedPattern>${shaded.dependency.prefix}.net.</shadedPattern>

4
hadoop-project/pom.xml
View File

@ -71,8 +71,8 @@
<!-- jackson versions -->
<jackson.version>1.9.13</jackson.version>
<jackson2.version>2.9.10</jackson2.version>
<jackson2.databind.version>2.9.10.3</jackson2.databind.version>
<jackson2.version>2.10.3</jackson2.version>
<jackson2.databind.version>2.10.3</jackson2.databind.version>
<!-- httpcomponents versions -->
<httpclient.version>4.5.6</httpclient.version>