Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jackson with MySQL connector CVE - partial update #4858

Merged
merged 5 commits into from
Jun 16, 2019

Conversation

zloster
Copy link
Contributor

@zloster zloster commented Jun 16, 2019

More information here: FasterXML/jackson-databind#2326

I've changed the easy ones. Also some of the projects where a little more exclusion/inclusion was needed. What is left are the ones with the most effort required.

  • Java/jooby2 - even RC3 doesn't have Jackson 2.9.9. Probably the declaration as child POM should be removed. Than exclude and import the correct version of the dependencies;
  • Java/ratpack - Gradle build;
  • Java/proteus - around 6 Jackson dependencies;
  • Java/spring;
  • Java/spring-webflux;
  • Clojure/http-kit;
  • Clojure/compojure;
  • Clojure/aleph;
  • probably I've missed some.

I don't plan to work on them. It will be too much effort for me.

@NateBrady23 NateBrady23 merged commit def0559 into TechEmpower:master Jun 16, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants