Skip to content

Commit 5b2c0a0

Browse files
davisusanibarlidavidm
davisusanibar
authored and
lidavidm
committed
ARROW-16143: [Java] Upgrade jackson dependencies CVE-2020-36518
Move jackson dependencies to depend on jackon bill of materials jackson-bom Closes apache#12912 from davisusanibar/java-cve-ARROW-16143 Authored-by: david dali susanibar arce <davi.sarces@gmail.com> Signed-off-by: David Li <li.davidm96@gmail.com>
1 parent 5644c9a commit 5b2c0a0

2 files changed

Lines changed: 7 additions & 12 deletions

File tree

‎java/adapter/jdbc/pom.xml‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -61,28 +61,24 @@
6161
<dependency>
6262
<groupId>com.fasterxml.jackson.dataformat</groupId>
6363
<artifactId>jackson-dataformat-yaml</artifactId>
64-
<version>${dep.jackson.version}</version>
6564
<scope>test</scope>
6665
</dependency>
6766

6867
<dependency>
6968
<groupId>com.fasterxml.jackson.core</groupId>
7069
<artifactId>jackson-databind</artifactId>
71-
<version>${dep.jackson.version}</version>
7270
<scope>test</scope>
7371
</dependency>
7472

7573
<dependency>
7674
<groupId>com.fasterxml.jackson.core</groupId>
7775
<artifactId>jackson-core</artifactId>
78-
<version>${dep.jackson.version}</version>
7976
<scope>test</scope>
8077
</dependency>
8178

8279
<dependency>
8380
<groupId>com.fasterxml.jackson.core</groupId>
8481
<artifactId>jackson-annotations</artifactId>
85-
<version>${dep.jackson.version}</version>
8682
<scope>test</scope>
8783
</dependency>
8884

‎java/pom.xml‎

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,6 @@
3434
<dep.slf4j.version>1.7.25</dep.slf4j.version>
3535
<dep.guava.version>30.1.1-jre</dep.guava.version>
3636
<dep.netty.version>4.1.72.Final</dep.netty.version>
37-
<dep.jackson.version>2.13.2</dep.jackson.version>
3837
<dep.jackson-bom.version>2.13.2.20220328</dep.jackson-bom.version>
3938
<dep.hadoop.version>2.7.1</dep.hadoop.version>
4039
<dep.fbs.version>1.12.0</dep.fbs.version>
@@ -538,13 +537,6 @@
538537
<artifactId>netty-common</artifactId>
539538
<version>${dep.netty.version}</version>
540539
</dependency>
541-
<dependency>
542-
<groupId>com.fasterxml.jackson</groupId>
543-
<artifactId>jackson-bom</artifactId>
544-
<version>${dep.jackson-bom.version}</version>
545-
<type>pom</type>
546-
<scope>import</scope>
547-
</dependency>
548540
<dependency>
549541
<groupId>com.google.code.findbugs</groupId>
550542
<artifactId>jsr305</artifactId>
@@ -571,6 +563,13 @@
571563
<artifactId>hamcrest</artifactId>
572564
<version>2.2</version>
573565
</dependency>
566+
<dependency>
567+
<groupId>com.fasterxml.jackson</groupId>
568+
<artifactId>jackson-bom</artifactId>
569+
<version>${dep.jackson-bom.version}</version>
570+
<type>pom</type>
571+
<scope>import</scope>
572+
</dependency>
574573
</dependencies>
575574
</dependencyManagement>
576575

0 commit comments

Comments
 (0)