Skip to content

Conversation

@m-brophy
Copy link
Contributor

upgrade jackson-databind for CVE

https://issues.redhat.com/browse/WINDUP-3926

@m-brophy m-brophy added Ready to Review auto-backport Set the PR for being backported labels Nov 15, 2023
@m-brophy m-brophy added auto-backport-to-releases/6.3.z Backport this issue to releases/6.3.z branch and removed auto-backport Set the PR for being backported labels Nov 15, 2023
@PhilipCattanach
Copy link
Contributor

@m-brophy - This looks like a genuine compile failure
/home/runner/work/windup-web/windup-web/model/src/main/java/org/jboss/windup/web/services/json/WindupExecutionJSONUtil.java:[30,36] error: cannot access StreamWriteException
class file for com.fasterxml.jackson.core.exc.StreamWriteException not found

@PhilipCattanach PhilipCattanach added the auto-backport Set the PR for being backported label Nov 17, 2023
@PhilipCattanach PhilipCattanach merged commit 181fb84 into windup:master Dec 6, 2023
github-actions bot pushed a commit that referenced this pull request Dec 6, 2023
* upgrade jackson-databind

Signed-off-by: m-brophy <[email protected]>

* override jackson-core version from resteasy-jackson2-provider

Signed-off-by: m-brophy <[email protected]>

* remove unneeded import

Signed-off-by: m-brophy <[email protected]>

* add jackson-annotations dependency to fix test failures

---------

Signed-off-by: m-brophy <[email protected]>
(cherry picked from commit 181fb84)
@github-actions
Copy link

github-actions bot commented Dec 6, 2023

💚 All backports created successfully

Status Branch Result
releases/6.3.z

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

mrizzi pushed a commit that referenced this pull request Dec 14, 2023
* upgrade jackson-databind

Signed-off-by: m-brophy <[email protected]>

* override jackson-core version from resteasy-jackson2-provider

Signed-off-by: m-brophy <[email protected]>

* remove unneeded import

Signed-off-by: m-brophy <[email protected]>

* add jackson-annotations dependency to fix test failures

---------

Signed-off-by: m-brophy <[email protected]>
(cherry picked from commit 181fb84)

Co-authored-by: Mark Brophy <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Set the PR for being backported auto-backport-to-releases/6.3.z Backport this issue to releases/6.3.z branch Ready to Review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants