Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ISSUE #285] Upgrade jackson/fastjson version #284

Merged
merged 1 commit into from
Jul 21, 2020
Merged

[ISSUE #285] Upgrade jackson/fastjson version #284

merged 1 commit into from
Jul 21, 2020

Conversation

iapplejohn
Copy link
Contributor

@iapplejohn iapplejohn commented Jul 20, 2020 •
edited
Loading

What is the purpose of the change

  1. To eliminate the vulnerability of the serialization components. [ISSUE Serialization vulnerability of fastjson / jackson #285 ]

Brief changelog

  1. Upgrade jackson version from 2.9.7 to 2.11.1
  2. Upgrade fastjson version from 1.2.69 to 1.2.72

Verifying this change

  1. Jackson: https://help.aliyun.com/noticelist/articleid/1060035134.html
  2. Fastjson: https://help.aliyun.com/noticelist/articleid/1060343604.html

@RongtongJin
Copy link
Contributor

Hi @iapplejohn, Could you create an issue to link this pull request?

@RongtongJin RongtongJin added this to the 2.2.0 milestone Jul 20, 2020
@RongtongJin RongtongJin changed the title Upgrade jackson version to 2.11.1; Upgrade fastjson version to 1.2.72 Upgrade jackson/fastjson version Jul 20, 2020
@iapplejohn iapplejohn changed the title Upgrade jackson/fastjson version [ISSUE #285] Upgrade jackson/fastjson version Jul 21, 2020
@RongtongJin RongtongJin merged commit b4cd289 into apache:master Jul 21, 2020
@RongtongJin RongtongJin modified the milestones: 2.2.0, 2.2.1 Jan 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@iapplejohn @RongtongJin