Skip to content
Permalink
Browse files
[NO ISSUE][*DB][MISC] pickup HADOOP-17225 patch to mitigate CVE-2019-…
…10172

Change-Id: If84ef913395c75baf64e4b9c459f0d5b3303efd5
Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/15584
Integration-Tests: Jenkins <jenkins@fulliautomatix.ics.uci.edu>
Reviewed-by: Michael Blow <mblow@apache.org>
Reviewed-by: Hussain Towaileb <hussainht@gmail.com>
Tested-by: Jenkins <jenkins@fulliautomatix.ics.uci.edu>
  • Loading branch information
mblow committed Mar 9, 2022
1 parent e06cf46 commit 5725e3df96924da13da1e27fe6e901b8e346560f
Showing 2 changed files with 37 additions and 0 deletions.
@@ -506,6 +506,29 @@
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-azure</artifactId>
<exclusions>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<exclusion>
<groupId>org.codehaus.jackson</groupId>
<artifactId>jackson-mapper-asl</artifactId>
</exclusion>
<exclusion>
<groupId>org.codehaus.jackson</groupId>
<artifactId>jackson-core-asl</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<dependency>
<groupId>org.codehaus.jackson</groupId>
<artifactId>jackson-mapper-asl</artifactId>
<version>1.9.13-atlassian-6</version>
</dependency>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<dependency>
<groupId>org.codehaus.jackson</groupId>
<artifactId>jackson-core-asl</artifactId>
<version>1.9.13-atlassian-6</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
@@ -520,4 +543,11 @@
<artifactId>netty-transport-native-unix-common</artifactId>
</dependency>
</dependencies>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<repositories>
<repository>
<id>atlassian-3rdparty</id>
<url>https://packages.atlassian.com/maven-3rdparty/</url>
</repository>
</repositories>
</project>
@@ -1098,4 +1098,11 @@
<artifactId>hyracks-api</artifactId>
</dependency>
</dependencies>
<!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 -->
<repositories>
<repository>
<id>atlassian-3rdparty</id>
<url>https://packages.atlassian.com/maven-3rdparty/</url>
</repository>
</repositories>
</project>

0 comments on commit 5725e3d

Please sign in to comment.