Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated jackson version to 2.8.11 #3170

Closed
wants to merge 1 commit into from
Closed

Updated jackson version to 2.8.11 #3170

wants to merge 1 commit into from

Conversation

tjo
Copy link

@tjo tjo commented Apr 16, 2018

Please ensure your pull request adheres to the following guidelines:

  • Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make
  • Use the following formatting style: SonarSource/sonar-developer-toolset
  • Provide a unit test for any code you changed
  • If there is a JIRA ticket available, please make your commits and pull request start with the ticket ID (SONAR-XXXX)

The current jackson-databind version (2.6.6) contains multiple vulnerabilities (FasterXML/jackson-databind#1904) that were fixed in the 2.8.11 version. This also applies to jjwt dependency - jwtk/jjwt#302
This change will override the jackson-databind version pulled by jjwt

Current unit tests should cover compatibility.

This should solve also RSPEC-4544.

@simonbrandhof
Copy link
Contributor

Thanks for the contribution. Ticket was created: https://jira.sonarsource.com/browse/SONAR-10608 and will be fixed in 6.7.4 and 7.2.
Note that the Travis build for external contributions will have to be fixed on our side. Some private credentials make the build fail.

@simonbrandhof simonbrandhof self-assigned this Apr 19, 2018
@simonbrandhof simonbrandhof self-requested a review April 19, 2018 13:05
@simonbrandhof
Copy link
Contributor

Patch applied to branch-6.7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants