Skip to content

Commit ed176b9

Browse files
Mariamalmesfertdcmeehan
authored andcommitted
Upgrade Jackson & its dependencies to resolve CVEs
If applied, this will: Upgrade Jackson Core, Databind, and other dependencies to version 2.15.4. Address security vulnerabilities, including PRISMA-2023-0067.
1 parent e535f7c commit ed176b9

File tree

5 files changed

+41
-4
lines changed

5 files changed

+41
-4
lines changed

pom.xml

Lines changed: 39 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@
7777
<dep.ratis.version>2.2.0</dep.ratis.version>
7878
<dep.errorprone.version>2.18.0</dep.errorprone.version>
7979
<dep.guava.version>32.1.0-jre</dep.guava.version>
80-
<dep.jackson.version>2.11.0</dep.jackson.version>
80+
<dep.jackson.version>2.15.4</dep.jackson.version>
8181
<dep.j2objc.version>2.8</dep.j2objc.version>
8282
<dep.avro.version>1.11.4</dep.avro.version>
8383
<dep.commons.compress.version>1.26.2</dep.commons.compress.version>
@@ -798,6 +798,36 @@
798798
<version>${dep.jackson.version}</version>
799799
</dependency>
800800

801+
<dependency>
802+
<groupId>com.fasterxml.jackson.core</groupId>
803+
<artifactId>jackson-core</artifactId>
804+
<version>${dep.jackson.version}</version>
805+
</dependency>
806+
807+
<dependency>
808+
<groupId>com.fasterxml.jackson.core</groupId>
809+
<artifactId>jackson-annotations</artifactId>
810+
<version>${dep.jackson.version}</version>
811+
</dependency>
812+
813+
<dependency>
814+
<groupId>com.fasterxml.jackson.dataformat</groupId>
815+
<artifactId>jackson-dataformat-smile</artifactId>
816+
<version>${dep.jackson.version}</version>
817+
</dependency>
818+
819+
<dependency>
820+
<groupId>com.fasterxml.jackson.dataformat</groupId>
821+
<artifactId>jackson-dataformat-yaml</artifactId>
822+
<version>${dep.jackson.version}</version>
823+
</dependency>
824+
825+
<dependency>
826+
<groupId>com.fasterxml.jackson.core</groupId>
827+
<artifactId>jackson-databind</artifactId>
828+
<version>${dep.jackson.version}</version>
829+
</dependency>
830+
801831
<dependency>
802832
<groupId>com.jayway.jsonpath</groupId>
803833
<artifactId>json-path</artifactId>
@@ -2277,6 +2307,14 @@
22772307
<plugin>
22782308
<groupId>org.apache.maven.plugins</groupId>
22792309
<artifactId>maven-enforcer-plugin</artifactId>
2310+
<version>3.3.0</version>
2311+
<dependencies>
2312+
<dependency>
2313+
<groupId>org.codehaus.mojo</groupId>
2314+
<artifactId>extra-enforcer-rules</artifactId>
2315+
<version>1.6.2</version>
2316+
</dependency>
2317+
</dependencies>
22802318
<configuration>
22812319
<rules>
22822320
<requireUpperBoundDeps>

presto-bigquery/pom.xml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -353,6 +353,7 @@
353353
<exclude>com.fasterxml.jackson.core:jackson-core</exclude>
354354
<exclude>javax.annotation:javax.annotation-api</exclude>
355355
<exclude>com.fasterxml.jackson.core:jackson-databind</exclude>
356+
<exclude>com.google.api.grpc:proto-google-common-protos</exclude>
356357
</excludes>
357358
</requireUpperBoundDeps>
358359
</rules>

presto-hudi/pom.xml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -217,7 +217,6 @@
217217
<dependency>
218218
<groupId>com.fasterxml.jackson.core</groupId>
219219
<artifactId>jackson-annotations</artifactId>
220-
<version>2.10.2</version>
221220
<scope>provided</scope>
222221
</dependency>
223222

presto-iceberg/pom.xml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -459,7 +459,6 @@
459459
<dependency>
460460
<groupId>com.fasterxml.jackson.core</groupId>
461461
<artifactId>jackson-annotations</artifactId>
462-
<version>2.10.2</version>
463462
<scope>provided</scope>
464463
</dependency>
465464

presto-spi/src/main/java/com/facebook/presto/spi/MaterializedViewDefinition.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -270,7 +270,7 @@ public String getColumnName()
270270
return columnName;
271271
}
272272

273-
@JsonProperty
273+
@JsonProperty(value = "isDirectMapped")
274274
public Optional<Boolean> isDirectMapped()
275275
{
276276
return isDirectMapped;

0 commit comments

Comments
 (0)