Package
logstash-9.0
Component
jackson-core
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Previous location
/usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/logstash-integration-kafka-11.8.6-java/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-core/2.16.0/jackson-core-2.16.0.jarNew location
/usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/logstash-integration-kafka-12.1.1-java/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-core/2.20.0/jackson-core-2.20.0.jarImpact
version-only path change detected during APK rebuild
Status
Impact
jackson-core 2.16.2 is used by logstash-core via versions.yml, which upstream explicitly requires to stay in sync with the jrjackson gem — upstream logstash has not updated this. jackson-core 2.15.4 is embedded directly inside the jrjackson Ruby gem v0.4.20 (latest release), which bundles the JARs and has not released an update with a fixed jackson version. Fix requires upstream logstash to release updated versions.
Status