Apache
/
hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-16905. Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches (#3748) 

(cherry picked from commit 69faaa1d58)

 Conflicts:
	hadoop-project/pom.xml
This commit is contained in:
Akira Ajisaka 2021-12-10 16:24:06 +09:00 committed by GitHub
parent 94ca965e21
commit bc6874139f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hadoop-client-modules/hadoop-client-runtime/pom.xml
View File

@ -334,6 +334,13 @@
<exclude>**/pom.xml</exclude>
</excludes>
</relocation>
<relocation>
<pattern>javax/xml/bind/</pattern>
<shadedPattern>${shaded.dependency.prefix}.javax.xml.bind.</shadedPattern>
<excludes>
<exclude>**/pom.xml</exclude>
</excludes>
</relocation>
<relocation>
<pattern>net/</pattern>
<shadedPattern>${shaded.dependency.prefix}.net.</shadedPattern>

4
hadoop-project/pom.xml
View File

@ -71,8 +71,8 @@
<!-- jackson versions -->
<jackson.version>1.9.13</jackson.version>
<jackson2.version>2.9.10</jackson2.version>
<jackson2.databind.version>2.9.10.4</jackson2.databind.version>
<jackson2.version>2.10.3</jackson2.version>
<jackson2.databind.version>2.10.3</jackson2.databind.version>
<!-- httpcomponents versions -->
<httpclient.version>4.5.13</httpclient.version>