Skip to content

Conversation

@iosmanthus
Copy link
Member

Signed-off-by: iosmanthus myosmanthustree@gmail.com

What problem does this PR solve?

Issue Number: close #567

Problem Description:

upgrade jackson-databind to 2.13.2.2 to fix CVE-2020-36518

What is changed and how does it work?

Related changes

  • Need to cherry-pick the release branch
  • Need to update the documentation
  • Need to be included in the release note
  • NO related changes

…-36518 (tikv#584)

Signed-off-by: iosmanthus <myosmanthustree@gmail.com>
@codecov
Copy link

codecov bot commented May 30, 2022

Codecov Report

❗ No coverage uploaded for pull request base (release-3.1.13@e72ba8b). Click here to learn what that means.
The diff coverage is n/a.

@@                Coverage Diff                @@
##             release-3.1.13     #605   +/-   ##
=================================================
  Coverage                  ?   29.51%           
  Complexity                ?     1149           
=================================================
  Files                     ?      263           
  Lines                     ?    16526           
  Branches                  ?     1892           
=================================================
  Hits                      ?     4878           
  Misses                    ?    11118           
  Partials                  ?      530           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e72ba8b...67ca6bf. Read the comment docs.

@sunxiaoguang sunxiaoguang merged commit fed0826 into tikv:release-3.1.13 May 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants