Skip to content

Commit 7bd9998

Browse files
mattisonchaomattisonchao
authored
[improve][build] Revert "Upgrade jackson version to 2.15.0 for CVE-2022-1471 (#20177)" (#20182)
1 parent fd60e9e commit 7bd9998

File tree

5 files changed

+42
-39
lines changed

5 files changed

+42
-39
lines changed

‎distribution/server/src/assemble/LICENSE.bin.txt

+11-11
Original file line numberDiff line numberDiff line change
@@ -246,17 +246,17 @@ The Apache Software License, Version 2.0
246246
* JCommander -- com.beust-jcommander-1.82.jar
247247
* High Performance Primitive Collections for Java -- com.carrotsearch-hppc-0.9.1.jar
248248
* Jackson
249-
- com.fasterxml.jackson.core-jackson-annotations-2.15.0.jar
250-
- com.fasterxml.jackson.core-jackson-core-2.15.0.jar
251-
- com.fasterxml.jackson.core-jackson-databind-2.15.0.jar
252-
- com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.15.0.jar
253-
- com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.15.0.jar
254-
- com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.15.0.jar
255-
- com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.15.0.jar
256-
- com.fasterxml.jackson.module-jackson-module-jsonSchema-2.15.0.jar
257-
- com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.15.0.jar
258-
- com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.15.0.jar
259-
- com.fasterxml.jackson.module-jackson-module-parameter-names-2.15.0.jar
249+
- com.fasterxml.jackson.core-jackson-annotations-2.14.2.jar
250+
- com.fasterxml.jackson.core-jackson-core-2.14.2.jar
251+
- com.fasterxml.jackson.core-jackson-databind-2.14.2.jar
252+
- com.fasterxml.jackson.dataformat-jackson-dataformat-yaml-2.14.2.jar
253+
- com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.14.2.jar
254+
- com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.14.2.jar
255+
- com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.14.2.jar
256+
- com.fasterxml.jackson.module-jackson-module-jsonSchema-2.14.2.jar
257+
- com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.14.2.jar
258+
- com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.14.2.jar
259+
- com.fasterxml.jackson.module-jackson-module-parameter-names-2.14.2.jar
260260
* Caffeine -- com.github.ben-manes.caffeine-caffeine-2.9.1.jar
261261
* Conscrypt -- org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar
262262
* Proto Google Common Protos -- com.google.api.grpc-proto-google-common-protos-2.0.1.jar

‎distribution/shell/src/assemble/LICENSE.bin.txt

+11-11
Original file line numberDiff line numberDiff line change
@@ -311,17 +311,17 @@ This projects includes binary packages with the following licenses:
311311
The Apache Software License, Version 2.0
312312
* JCommander -- jcommander-1.82.jar
313313
* Jackson
314-
- jackson-annotations-2.15.0.jar
315-
- jackson-core-2.15.0.jar
316-
- jackson-databind-2.15.0.jar
317-
- jackson-dataformat-yaml-2.15.0.jar
318-
- jackson-jaxrs-base-2.15.0.jar
319-
- jackson-jaxrs-json-provider-2.15.0.jar
320-
- jackson-module-jaxb-annotations-2.15.0.jar
321-
- jackson-module-jsonSchema-2.15.0.jar
322-
- jackson-datatype-jdk8-2.15.0.jar
323-
- jackson-datatype-jsr310-2.15.0.jar
324-
- jackson-module-parameter-names-2.15.0.jar
314+
- jackson-annotations-2.14.2.jar
315+
- jackson-core-2.14.2.jar
316+
- jackson-databind-2.14.2.jar
317+
- jackson-dataformat-yaml-2.14.2.jar
318+
- jackson-jaxrs-base-2.14.2.jar
319+
- jackson-jaxrs-json-provider-2.14.2.jar
320+
- jackson-module-jaxb-annotations-2.14.2.jar
321+
- jackson-module-jsonSchema-2.14.2.jar
322+
- jackson-datatype-jdk8-2.14.2.jar
323+
- jackson-datatype-jsr310-2.14.2.jar
324+
- jackson-module-parameter-names-2.14.2.jar
325325
* Conscrypt -- conscrypt-openjdk-uber-2.5.2.jar
326326
* Gson
327327
- gson-2.8.9.jar

‎pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,7 @@ flexible messaging model and an intuitive client API.</description>
154154
<bouncycastle.version>1.69</bouncycastle.version>
155155
<bouncycastle.bcpkix-fips.version>1.0.6</bouncycastle.bcpkix-fips.version>
156156
<bouncycastle.bc-fips.version>1.0.2.3</bouncycastle.bc-fips.version>
157-
<jackson.version>2.15.0</jackson.version>
157+
<jackson.version>2.14.2</jackson.version>
158158
<reflections.version>0.10.2</reflections.version>
159159
<swagger.version>1.6.2</swagger.version>
160160
<puppycrawl.checkstyle.version>8.37</puppycrawl.checkstyle.version>

‎pulsar-common/src/main/java/org/apache/pulsar/common/util/FieldParser.java

+5-2
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@
2121
import static com.google.common.base.Preconditions.checkArgument;
2222
import static java.lang.String.format;
2323
import static java.util.Objects.requireNonNull;
24+
import com.fasterxml.jackson.databind.AnnotationIntrospector;
25+
import com.fasterxml.jackson.databind.introspect.JacksonAnnotationIntrospector;
2426
import com.fasterxml.jackson.databind.util.EnumResolver;
2527
import java.lang.reflect.Field;
2628
import java.lang.reflect.Method;
@@ -56,6 +58,8 @@ public final class FieldParser {
5658
private static final Map<String, Method> CONVERTERS = new HashMap<>();
5759
private static final Map<Class<?>, Class<?>> WRAPPER_TYPES = new HashMap<>();
5860

61+
private static final AnnotationIntrospector ANNOTATION_INTROSPECTOR = new JacksonAnnotationIntrospector();
62+
5963
static {
6064
// Preload converters and wrapperTypes.
6165
initConverters();
@@ -96,8 +100,7 @@ public static <T> T convert(Object from, Class<T> to) {
96100

97101
if (to.isEnum()) {
98102
// Converting string to enum
99-
EnumResolver r = EnumResolver.constructUsingToString(
100-
ObjectMapperFactory.getMapper().getObjectMapper().getDeserializationConfig(), to);
103+
EnumResolver r = EnumResolver.constructUsingToString((Class<Enum<?>>) to, ANNOTATION_INTROSPECTOR);
101104
T value = (T) r.findEnum((String) from);
102105
if (value == null) {
103106
throw new RuntimeException("Invalid value '" + from + "' for enum " + to);

‎pulsar-sql/presto-distribution/LICENSE

+14-14
Original file line numberDiff line numberDiff line change
@@ -207,19 +207,19 @@ This projects includes binary packages with the following licenses:
207207
The Apache Software License, Version 2.0
208208

209209
* Jackson
210-
- jackson-annotations-2.15.0.jar
211-
- jackson-core-2.15.0.jar
212-
- jackson-databind-2.15.0.jar
213-
- jackson-dataformat-smile-2.15.0.jar
214-
- jackson-datatype-guava-2.15.0.jar
215-
- jackson-datatype-jdk8-2.15.0.jar
216-
- jackson-datatype-joda-2.15.0.jar
217-
- jackson-datatype-jsr310-2.15.0.jar
218-
- jackson-dataformat-yaml-2.15.0.jar
219-
- jackson-jaxrs-base-2.15.0.jar
220-
- jackson-jaxrs-json-provider-2.15.0.jar
221-
- jackson-module-jaxb-annotations-2.15.0.jar
222-
- jackson-module-jsonSchema-2.15.0.jar
210+
- jackson-annotations-2.14.2.jar
211+
- jackson-core-2.14.2.jar
212+
- jackson-databind-2.14.2.jar
213+
- jackson-dataformat-smile-2.14.2.jar
214+
- jackson-datatype-guava-2.14.2.jar
215+
- jackson-datatype-jdk8-2.14.2.jar
216+
- jackson-datatype-joda-2.14.2.jar
217+
- jackson-datatype-jsr310-2.14.2.jar
218+
- jackson-dataformat-yaml-2.14.2.jar
219+
- jackson-jaxrs-base-2.14.2.jar
220+
- jackson-jaxrs-json-provider-2.14.2.jar
221+
- jackson-module-jaxb-annotations-2.14.2.jar
222+
- jackson-module-jsonSchema-2.14.2.jar
223223
* Guava
224224
- guava-31.0.1-jre.jar
225225
- listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
@@ -456,7 +456,7 @@ The Apache Software License, Version 2.0
456456
* Snappy
457457
- snappy-java-1.1.8.4.jar
458458
* Jackson
459-
- jackson-module-parameter-names-2.15.0.jar
459+
- jackson-module-parameter-names-2.14.2.jar
460460
* Java Assist
461461
- javassist-3.25.0-GA.jar
462462
* Java Native Access

0 commit comments

Comments
 (0)