Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) #240

Merged
merged 1 commit into from
Oct 14, 2022

Conversation

reta
Copy link
Collaborator

@reta reta commented Oct 13, 2022

Description

Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (see please FasterXML/jackson-databind#3621)

Issues Resolved

N/A

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@reta reta requested review from a team and madhusudhankonda as code owners October 13, 2022 19:04
@VachaShah VachaShah merged commit c56f8ae into opensearch-project:main Oct 14, 2022
abhinav-nath pushed a commit to abhinav-nath/opensearch-java that referenced this pull request Oct 21, 2022
abhinav-nath pushed a commit to abhinav-nath/opensearch-java that referenced this pull request Oct 21, 2022
VachaShah pushed a commit that referenced this pull request Oct 21, 2022
…#234)

* Add support to parse sub-aggregations from filter/nested aggregations

Signed-off-by: Abhinav Nath <[email protected]>

* Add USER_GUIDE.md

Signed-off-by: Abhinav Nath <[email protected]>

* Add DCO

Signed-off-by: Abhinav Nath <[email protected]>

* Add link to USER_GUIDE.md in README.md

Signed-off-by: Abhinav Nath <[email protected]>

* Add changelog and changelog verifier (#239)

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Set javadoc encoding to utf-8 (#50) (#241)

Signed-off-by: Meetesh Kumawat<[email protected]>
Signed-off-by: meetesh <[email protected]>

Signed-off-by: Meetesh Kumawat<[email protected]>
Signed-off-by: meetesh <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (#240)

Signed-off-by: Andriy Redko <[email protected]>

Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Updates changelog for dependabot PRs (#247)

* Updates changelog for dependabot PRs

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>

* Adding dependabot label for workflow

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Update tests to use JUnit's Assert (#244)

Signed-off-by: Andriy Redko <[email protected]>

Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Update literature around changelog (#242)

* Update literature

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>

* Removing pr template and updating language

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>

Signed-off-by: Harsha Vamsi Kalluri <[email protected]>
Co-authored-by: Daniel (dB.) Doubrovkine <[email protected]>
Signed-off-by: Abhinav Nath <[email protected]>

* Bump grgit-gradle from 4.0.1 to 5.0.0 (#243)

* Bump grgit-gradle from 4.0.1 to 5.0.0

Bumps [grgit-gradle](https://github.com/ajoberstar/grgit) from 4.0.1 to 5.0.0.
- [Release notes](https://github.com/ajoberstar/grgit/releases)
- [Commits](ajoberstar/grgit@4.0.1...5.0.0)

---
updated-dependencies:
- dependency-name: org.ajoberstar.grgit:grgit-gradle
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update changelog

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Signed-off-by: Abhinav Nath <[email protected]>

* Add DCO

Signed-off-by: Abhinav Nath <[email protected]>

* Update CHANGELOG and README

Signed-off-by: Abhinav Nath <[email protected]>

* Add DCO

Signed-off-by: Abhinav Nath <[email protected]>

* Add DCO

Signed-off-by: Abhinav Nath <[email protected]>

* Fix CHANGLOG and README TOC

Signed-off-by: Abhinav Nath <[email protected]>

Signed-off-by: Abhinav Nath <[email protected]>
Signed-off-by: Harsha Vamsi Kalluri <[email protected]>
Signed-off-by: Meetesh Kumawat<[email protected]>
Signed-off-by: meetesh <[email protected]>
Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Harsha Vamsi Kalluri <[email protected]>
Co-authored-by: Meetesh Kumawat <[email protected]>
Co-authored-by: Andriy Redko <[email protected]>
Co-authored-by: Daniel (dB.) Doubrovkine <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants