Move Jackson-databind to 2.13.2 (#2548) (#2562)

Resolves CVE-2020-36518 Signed-off-by: Peter Nied <[email protected]> (cherry picked from commit d43235c) Co-authored-by: Peter Nied <[email protected]>
opensearch-project · Mar 22, 2022 · 6c85e40 · 6c85e40
1 parent d52cd9d
commit 6c85e40
Show file tree

Hide file tree

Showing 39 changed files with 20 additions and 20 deletions.
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
@@ -9,7 +9,7 @@ bundled_jdk = 11.0.14.1+1
 # optional dependencies
 spatial4j         = 0.7
 jts               = 1.15.0
-jackson           = 2.12.6
+jackson           = 2.13.2
 snakeyaml         = 1.26
 icu4j             = 62.1
 supercsv          = 2.4.0

diff --git a/client/sniffer/licenses/jackson-core-2.12.6.jar.sha1 b/client/sniffer/licenses/jackson-core-2.12.6.jar.sha1
diff --git a/client/sniffer/licenses/jackson-core-2.13.2.jar.sha1 b/client/sniffer/licenses/jackson-core-2.13.2.jar.sha1
@@ -0,0 +1 @@
+0a6a0e0620d51833feffc67bccb51937b2345763
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-annotations-2.12.6.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-annotations-2.12.6.jar.sha1
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-annotations-2.13.2.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+ec18851f1976d5b810ae1a5fcc32520d2d38f77a
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.12.6.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.2.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f
diff --git a/libs/x-content/licenses/jackson-core-2.12.6.jar.sha1 b/libs/x-content/licenses/jackson-core-2.12.6.jar.sha1
diff --git a/libs/x-content/licenses/jackson-core-2.13.2.jar.sha1 b/libs/x-content/licenses/jackson-core-2.13.2.jar.sha1
@@ -0,0 +1 @@
+0a6a0e0620d51833feffc67bccb51937b2345763
diff --git a/libs/x-content/licenses/jackson-dataformat-cbor-2.12.6.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-cbor-2.12.6.jar.sha1
diff --git a/libs/x-content/licenses/jackson-dataformat-cbor-2.13.2.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-cbor-2.13.2.jar.sha1
@@ -0,0 +1 @@
+4fc77e1ec6922fc48bf1181e4b38f600dac222ff
diff --git a/libs/x-content/licenses/jackson-dataformat-smile-2.12.6.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-smile-2.12.6.jar.sha1
diff --git a/libs/x-content/licenses/jackson-dataformat-smile-2.13.2.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-smile-2.13.2.jar.sha1
@@ -0,0 +1 @@
+984bb22f310ebbedc967d206e672f8acf766a98e
diff --git a/libs/x-content/licenses/jackson-dataformat-yaml-2.12.6.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-yaml-2.12.6.jar.sha1
diff --git a/libs/x-content/licenses/jackson-dataformat-yaml-2.13.2.jar.sha1 b/libs/x-content/licenses/jackson-dataformat-yaml-2.13.2.jar.sha1
@@ -0,0 +1 @@
+5601496b5b6e43d947aeeffbffadb2b18961c731
diff --git a/modules/ingest-geoip/licenses/jackson-annotations-2.12.6.jar.sha1 b/modules/ingest-geoip/licenses/jackson-annotations-2.12.6.jar.sha1
diff --git a/modules/ingest-geoip/licenses/jackson-annotations-2.13.2.jar.sha1 b/modules/ingest-geoip/licenses/jackson-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+ec18851f1976d5b810ae1a5fcc32520d2d38f77a
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.12.6.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.13.2.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f
diff --git a/plugins/discovery-ec2/licenses/jackson-annotations-2.12.6.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-annotations-2.12.6.jar.sha1
diff --git a/plugins/discovery-ec2/licenses/jackson-annotations-2.13.2.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+ec18851f1976d5b810ae1a5fcc32520d2d38f77a
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.12.6.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.13.2.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f
diff --git a/plugins/repository-azure/licenses/jackson-annotations-2.12.6.jar.sha1 b/plugins/repository-azure/licenses/jackson-annotations-2.12.6.jar.sha1
diff --git a/plugins/repository-azure/licenses/jackson-annotations-2.13.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+ec18851f1976d5b810ae1a5fcc32520d2d38f77a
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.12.6.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.13.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f
diff --git a/plugins/repository-azure/licenses/jackson-dataformat-xml-2.12.6.jar.sha1 b/plugins/repository-azure/licenses/jackson-dataformat-xml-2.12.6.jar.sha1
diff --git a/plugins/repository-azure/licenses/jackson-dataformat-xml-2.13.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-dataformat-xml-2.13.2.jar.sha1
@@ -0,0 +1 @@
+cb6a722f128ff0ce2494384d419b6ff20fad25ab
diff --git a/plugins/repository-azure/licenses/jackson-datatype-jsr310-2.12.6.jar.sha1 b/plugins/repository-azure/licenses/jackson-datatype-jsr310-2.12.6.jar.sha1
diff --git a/plugins/repository-azure/licenses/jackson-datatype-jsr310-2.13.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-datatype-jsr310-2.13.2.jar.sha1
@@ -0,0 +1 @@
+cddd9380efd4b81ea01e98be8fbdc9765a81793b
diff --git a/plugins/repository-azure/licenses/jackson-module-jaxb-annotations-2.12.6.jar.sha1 b/plugins/repository-azure/licenses/jackson-module-jaxb-annotations-2.12.6.jar.sha1
diff --git a/plugins/repository-azure/licenses/jackson-module-jaxb-annotations-2.13.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-module-jaxb-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+e2f198c512f0f0ccbd6d618baecc9dde9975eadf
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.12.6.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.13.2.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f
diff --git a/plugins/repository-s3/licenses/jackson-annotations-2.12.6.jar.sha1 b/plugins/repository-s3/licenses/jackson-annotations-2.12.6.jar.sha1
diff --git a/plugins/repository-s3/licenses/jackson-annotations-2.13.2.jar.sha1 b/plugins/repository-s3/licenses/jackson-annotations-2.13.2.jar.sha1
@@ -0,0 +1 @@
+ec18851f1976d5b810ae1a5fcc32520d2d38f77a
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.12.6.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.12.6.jar.sha1
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.13.2.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.13.2.jar.sha1
@@ -0,0 +1 @@
+926e48c451166a291f1ce6c6276d9abbefa7c00f