Skip to content

Bump jackson from 2.13.4.20221013 to 2.17.1 to address CVE list#4345

Merged
eolivelli merged 2 commits intoapache:masterfrom
hezhangjian:jackson-2-17-1
May 9, 2024
Merged

Bump jackson from 2.13.4.20221013 to 2.17.1 to address CVE list#4345
eolivelli merged 2 commits intoapache:masterfrom
hezhangjian:jackson-2-17-1

Conversation

@hezhangjian
Copy link
Member

@hezhangjian hezhangjian commented May 6, 2024

changes

  • CVE-2023-5072(7.5), CVE-2022-45688(7.5)
  • Also bump apache from 29 to 32, it will update some maven plugins(like maven-shade-plugin), to support jdk21

@hezhangjian hezhangjian changed the title Bump jackson from 2.13.4.20221013 to 2.17.1 address CVE list Bump jackson from 2.13.4.20221013 to 2.17.1 to address CVE list May 7, 2024
@hezhangjian
Copy link
Member Author

we might need to switch to jdk17 for build. I will open a discuss latter

@hezhangjian
Copy link
Member Author

hezhangjian commented May 9, 2024

we might need to switch to jdk17 for build. I will open a discuss latter

maven-shade-plugin needs to update to support jdk21. org.apache:apache needs to be updated.

ZhangJian He added 2 commits May 9, 2024 15:55
Signed-off-by: ZhangJian He <shoothzj@gmail.com>
Signed-off-by: ZhangJian He <shoothzj@gmail.com>
Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

Comments