Apache/hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-17633. Bump json-smart to 2.4.2 and nimbus-jose-jwt to 9.8 due to CVEs (#2895). Contributed by Viraj Jasani.

Browse Source 
Signed-off-by: Ayush Saxena <ayushsaxena@apache.org>
 Conflicts:
	LICENSE-binary
This commit is contained in:
Viraj Jasani 2021-04-16 12:36:01 +05:30 committed by Ayush Saxena
parent 1b5ef939d3
commit bef21ceb14
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hadoop-project/pom.xml
View File

@ -151,6 +151,8 @@
<hbase.two.version>2.0.0-beta-1</hbase.two.version>
<junit.version>4.13.1</junit.version>
<woodstox.version>5.3.0</woodstox.version>
<json-smart.version>2.4.2</json-smart.version>
<nimbus-jose-jwt.version>9.8.1</nimbus-jose-jwt.version>
</properties>
<dependencyManagement>
@ -1251,7 +1253,7 @@
<dependency>
<groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId>
<version>7.9</version>
<version>${nimbus-jose-jwt.version}</version>
<scope>compile</scope>
<exclusions>
<exclusion>
@ -1274,7 +1276,7 @@
-->
<groupId>net.minidev</groupId>
<artifactId>json-smart</artifactId>
<version>2.3</version>
<version>${json-smart.version}</version>
</dependency>
<dependency>
<groupId>org.skyscreamer</groupId>