Skip to content

HBASE-23075 Upgrade jackson version - #660

Merged
Apache9 merged 1 commit into
apache:masterfrom
SteNicholas:upgrade-jackson-version
Sep 26, 2019
Merged

HBASE-23075 Upgrade jackson version#660
Apache9 merged 1 commit into
apache:masterfrom
SteNicholas:upgrade-jackson-version

Conversation

@SteNicholas

Copy link
Copy Markdown
Member

Jackson security issues:
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
https://nvd.nist.gov/vuln/detail/CVE-2019-16335
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
https://nvd.nist.gov/vuln/detail/CVE-2019-14540

@Apache9Apache9 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1.

@Apache-HBase

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeComment
💙reexec0m 35sDocker mode activated.
_ Prechecks _
💚dupname0m 0sNo case conflicting files found.
💚@author0m 0sThe patch does not contain any @author tags.
💛test4tests0m 0sThe patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
_ master Compile Tests _
💚mvninstall5m 30smaster passed
💚compile2m 59smaster passed
💚shadedjars4m 30sbranch has no errors when building our shaded downstream artifacts.
💚javadoc2m 52smaster passed
_ Patch Compile Tests _
💚mvninstall4m 57sthe patch passed
💚compile3m 0sthe patch passed
💚javac3m 0sthe patch passed
💚whitespace0m 0sThe patch has no whitespace issues.
💚xml0m 1sThe patch has no ill-formed XML file.
💚shadedjars4m 33spatch has no errors when building our shaded downstream artifacts.
💚hadoopcheck15m 45sPatch does not cause any errors with Hadoop 2.8.5 2.9.2 or 3.1.2.
💚javadoc2m 51sthe patch passed
_ Other Tests _
💔unit175m 2sroot in the patch failed.
💚asflicense0m 41sThe patch does not generate ASF License warnings.
229m 28s
SubsystemReport/Notes
DockerClient=19.03.1 Server=19.03.1 base: https://builds.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-660/1/artifact/out/Dockerfile
GITHUB PR#660
Optional Testsdupname asflicense javac javadoc unit shadedjars hadoopcheck xml compile
unameLinux 78532474be7c 4.15.0-60-generic #67-Ubuntu SMP Thu Aug 22 16:55:30 UTC 2019 x86_64 GNU/Linux
Build toolmaven
Personality/home/jenkins/jenkins-slave/workspace/HBase-PreCommit-GitHub-PR_PR-660/out/precommit/personality/provided.sh
git revisionmaster / 52f5a85
Default Java1.8.0_181
unithttps://builds.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-660/1/artifact/out/patch-unit-root.txt
Test Resultshttps://builds.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-660/1/testReport/
Max. process+thread count4456 (vs. ulimit of 10000)
modulesC: . U: .
Console outputhttps://builds.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-660/1/console
versionsgit=2.11.0 maven=2018-06-17T18:33:14Z)
Powered byApache Yetus 0.11.0 https://yetus.apache.org

This message was automatically generated.

@Apache9
Apache9 merged commit ea24ea7 into apache:masterSep 26, 2019
asfgit pushed a commit that referenced this pull request Sep 26, 2019
Signed-off-by: Duo Zhang <zhangduo@apache.org>
asfgit pushed a commit that referenced this pull request Sep 26, 2019
Signed-off-by: Duo Zhang <zhangduo@apache.org>
asfgit pushed a commit that referenced this pull request Sep 26, 2019
Signed-off-by: Duo Zhang <zhangduo@apache.org>
infraio pushed a commit to infraio/hbase that referenced this pull request Aug 17, 2020
Signed-off-by: Duo Zhang <zhangduo@apache.org>
symat pushed a commit to symat/hbase that referenced this pull request Feb 17, 2021
Signed-off-by: Duo Zhang <zhangduo@apache.org>
(cherry picked from commit 5675781)
Change-Id: I20b01f4020d31b41ed21ee5ccf4f0077ba48f9e3
sanjeet006py pushed a commit to sanjeet006py/hbase that referenced this pull request Sep 26, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@SteNicholas@Apache-HBase@Apache9@maoling