Skip to content

ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities - #2447

Merged
anmolnar merged 1 commit into
apache:masterfrom
PDavid:ZOOKEEPER-5083-jackson-upgrade
Aug 31, 2026
Merged

ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities#2447
anmolnar merged 1 commit into
apache:masterfrom
PDavid:ZOOKEEPER-5083-jackson-upgrade

Conversation

@PDavid

@PDavid PDavid commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@PDavid PDavid self-assigned this Aug 31, 2026
@PDavid PDavid added the dependencies Pull requests that update a dependency file label Aug 31, 2026
@PDavid

PDavid commented Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

It seems org.apache.zookeeper.server.ServerCnxnFactoryTest.testShedConnections_SmallPercentageRoundsToZero{FactoryType}[2] failed in Jenkins:

org.opentest4j.AssertionFailedError: 1% of 1 connection should round to 0 ==> expected: <0> but was: <1>
	at org.apache.zookeeper.server.ServerCnxnFactoryTest.testShedConnections_SmallPercentageRoundsToZero(ServerCnxnFactoryTest.java:106)

However it is successful for me locally on this branch:

[INFO] 
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.zookeeper.server.ServerCnxnFactoryTest
[INFO] Tests run: 10, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.06 s - in org.apache.zookeeper.server.ServerCnxnFactoryTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 10, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  8.729 s
[INFO] Finished at: 2026-08-31T11:58:41+02:00
[INFO] ------------------------------------------------------------------------

anmolnar
anmolnar approved these changes Aug 31, 2026
View reviewed changes

@anmolnar anmolnar left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm.

@anmolnar
anmolnar merged commit ccef53e into apache:master Aug 31, 2026
17 checks passed
phunt
phunt reviewed Aug 31, 2026
View reviewed changes

@phunt phunt left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm - +1

Comment thread pom.xml
<jetty.version>12.1.12</jetty.version>
<!-- Servlet API version required by Jetty EE10 (see ee10.jakarta.servlet.api.version in jetty-ee10) -->
<jakarta.servlet.version>6.0.0</jakarta.servlet.version>
<jackson.version>2.18.8</jackson.version>

@phunt phunt Aug 31, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm +1

@PDavid
PDavid deleted the ZOOKEEPER-5083-jackson-upgrade branch September 1, 2026 06:34
asf-gitbox-commits pushed a commit that referenced this pull request Sep 1, 2026
@PDavid @anmolnar
ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known secur…
d2f3db5 
…ity vulnerabilities

Reviewers: anmolnar
Author: PDavid
Closes #2447 from PDavid/ZOOKEEPER-5083-jackson-upgrade

(cherry picked from commit ccef53e)
Signed-off-by: Andor Molnar <andor@cloudera.com>
asf-gitbox-commits pushed a commit that referenced this pull request Sep 1, 2026
@PDavid @anmolnar
ZOOKEEPER-5083: Upgrade Jackson-databind to 2.22.2 to fix known secur…
009ef5c 
…ity vulnerabilities

Reviewers: anmolnar
Author: PDavid
Closes #2447 from PDavid/ZOOKEEPER-5083-jackson-upgrade

(cherry picked from commit ccef53e)
Signed-off-by: Andor Molnar <andor@cloudera.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@phunt phunt phunt left review comments
@anmolnar anmolnar anmolnar approved these changes

Assignees

@PDavid PDavid

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@PDavid @phunt @anmolnar