Package
spark-4.1-scala-2.13
Component
jackson-core
Latest update
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Previous location
/usr/lib/spark/jars/parquet-jackson-1.18.0.jarNew location
/usr/lib/spark/jars/parquet-jackson-1.18.1.jarImpact
version-only path change detected during APK rebuild
Status
Impact
jackson-core and jackson-databind are shaded inside parquet-jackson (relocated to shaded.parquet.com.fasterxml.jackson). The fix needs jackson 2.22.3, but the latest Apache Parquet release (1.18.1) still bundles 2.22.2; apache/parquet-java master has moved to 2.22.3 but it is unreleased. Remediation is pending a Parquet release built against jackson 2.22.3 or later.
Status