Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Jackson has a serious security problem in 2.9.7, which will cause RCE #327

Merged
merged 2 commits into from
May 21, 2020
Merged

Jackson has a serious security problem in 2.9.7, which will cause RCE #327

merged 2 commits into from
May 21, 2020

Conversation

wcc526
Copy link
Contributor

@wcc526 wcc526 commented May 20, 2020

@tmgstevens
Copy link
Contributor

I've just tried building this and get the following:
[ERROR] Failed to execute goal on project flume-hdfs-sink: Could not resolve dependencies for project org.apache.flume.flume-ng-sinks:flume-hdfs-sink:jar:1.10.0-SNAPSHOT: The following artifacts could not be resolved: com.fasterxml.jackson.core:jackson-annotations:jar:2.9.10.3, com.fasterxml.jackson.core:jackson-core:jar:2.9.10.3: Could not find artifact com.fasterxml.jackson.core:jackson-annotations:jar:2.9.10.3 in central (https://repo.maven.apache.org/maven2)

@wcc526
Copy link
Contributor Author

wcc526 commented May 21, 2020

sorry ,the new version is 2.9.10,I have modified it

bessbd
bessbd approved these changes May 21, 2020
View reviewed changes
Copy link
Member

@bessbd bessbd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, +1. I'll leave some time for @tmgstevens to review and merge if he wants to.

@tmgstevens tmgstevens merged commit 59ffd4f into apache:trunk May 21, 2020
@bessbd
Copy link
Member

bessbd commented May 21, 2020

@wcc526, thank you for the patch!
@tmgstevens, thank you for the merge!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bessbd bessbd bessbd approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@wcc526 @tmgstevens @bessbd