Skip to content

Commit

Permalink
KAFKA-14320: Updated Jackson to version 2.13.4 for fixing CVE-2022-42004
Browse files Browse the repository at this point in the history
 (#12840)

* Updated Jackson to version 2.13.4 for fixing CVE-2022-42004, CVE-2020-36518
* Updated Jackson data bind to version 2.13.4.2 for fixing CVE-2022-42004

Co-authored-by: Pratim SC <pratim.sunilkumar.chaudhuri@mercer.com>

 Reviewers: Luke Chen <showuon@gmail.com>, Manikumar Reddy <manikumar.reddy@gmail.com>
  • Loading branch information
pratimsc authored and omkreddy committed Nov 18, 2022
1 parent 80e4f42 commit 9f3cbd8
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 14 deletions.
24 changes: 12 additions & 12 deletions LICENSE-binary
Expand Up @@ -208,18 +208,18 @@ License Version 2.0:
audience-annotations-0.5.0
commons-cli-1.4
commons-lang3-3.12.0
jackson-annotations-2.13.3
jackson-core-2.13.3
jackson-databind-2.13.3
jackson-dataformat-csv-2.13.3
jackson-dataformat-yaml-2.13.3
jackson-datatype-jdk8-2.13.3
jackson-datatype-jsr310-2.13.3
jackson-jaxrs-base-2.13.3
jackson-jaxrs-json-provider-2.13.3
jackson-module-jaxb-annotations-2.13.3
jackson-module-scala_2.13-2.13.3
jackson-module-scala_2.12-2.13.3
jackson-annotations-2.13.4
jackson-core-2.13.4
jackson-databind-2.13.4.2
jackson-dataformat-csv-2.13.4
jackson-dataformat-yaml-2.13.4
jackson-datatype-jdk8-2.13.4
jackson-datatype-jsr310-2.13.4
jackson-jaxrs-base-2.13.4
jackson-jaxrs-json-provider-2.13.4
jackson-module-jaxb-annotations-2.13.4
jackson-module-scala_2.13-2.13.4
jackson-module-scala_2.12-2.13.4
jakarta.validation-api-2.0.2
javassist-3.27.0-GA
jetty-client-9.4.48.v20220622
Expand Down
4 changes: 2 additions & 2 deletions gradle/dependencies.gradle
Expand Up @@ -66,8 +66,8 @@ versions += [
grgit: "4.1.1",
httpclient: "4.5.13",
easymock: "4.3",
jackson: "2.13.3",
jacksonDatabind: "2.13.3",
jackson: "2.13.4",
jacksonDatabind: "2.13.4.2",
jacoco: "0.8.7",
javassist: "3.27.0-GA",
jetty: "9.4.48.v20220622",
Expand Down

0 comments on commit 9f3cbd8

Please sign in to comment.