Details
-
Tech Debt
-
Status: Closed (View Workflow)
-
P2
-
Resolution: Done
-
None
-
-
Folijet Sprint 130
-
0.5
-
Folijet
-
Lotus R1 2022
Description
jackson-databind 2.10 has been closed since 2021-09-30, doesn't get any updates and therefore can no longer been used in critical production code: https://github.com/FasterXML/jackson/wiki/Jackson-Releases
Trying to use a jackson-databind version >= 2.11 fails with this error message:
Scala module 2.10.5 requires Jackson Databind version >= 2.10.0 and < 2.11.0
kafka-junit requires the Scala module.
Bumping the kafka-junit version from 2.8.0 to 3.0.0 bumps the jackson-databind version from 2.10.5.1 to 2.12.3. The version 2.12.* is still maintained and receives security patches.
TestRail: Results
Attachments
Issue Links
- defines
-
UXPROD-3262 NFR: Data Import R1 2022 Lotus Technical, NFR, & Misc work
-
- Closed
-
- relates to
-
MODSOURMAN-667 JsonNode JDK serialization DoS vulnerability
-
- Closed
-