Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.3] Move Jackson-databind to 2.13.2 (#2548) #3777

Merged
merged 2 commits into from
Jul 7, 2022

Conversation

mch2
Copy link
Member

@mch2 mch2 commented Jul 5, 2022

This is a backport of both #2599 and #2548 to 1.3 branch.

Resolves CVE-2020-36518

Signed-off-by: Peter Nied petern@amazon.com
(cherry picked from commit d43235c)

Description

backport #2548 to 1.3 branch.

Issues Resolved

[List any issues this PR will resolve]

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Resolves CVE-2020-36518

Signed-off-by: Peter Nied <petern@amazon.com>
(cherry picked from commit d43235c)
@mch2 mch2 marked this pull request as ready for review July 5, 2022 20:29
@mch2 mch2 requested a review from a team July 5, 2022 20:53
@mch2
Copy link
Member Author

mch2 commented Jul 5, 2022

hmm no gradle check kicked off here - @peterzhuamazon do we not run for 1.x line?

@mch2 mch2 force-pushed the backport/backport-2548-to-1.3 branch from fcf69ef to 61e22cd Compare July 6, 2022 18:11
@mch2
Copy link
Member Author

mch2 commented Jul 6, 2022

pushed an empty update to kick off gradle check.

@github-actions
Copy link
Contributor

github-actions bot commented Jul 6, 2022

Gradle Check (Jenkins) Run Completed with:

@github-actions
Copy link
Contributor

github-actions bot commented Jul 6, 2022

Gradle Check (Jenkins) Run Completed with:

@github-actions
Copy link
Contributor

github-actions bot commented Jul 7, 2022

Gradle Check (Jenkins) Run Completed with:

@mch2 mch2 merged commit d44f18d into opensearch-project:1.3 Jul 7, 2022
@mch2 mch2 deleted the backport/backport-2548-to-1.3 branch July 7, 2022 01:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants