CCMSG-1715 updating storage common to add missing jackon-bom dependen…

[kpatelatwork]

…cy to resolve the jackson 2.13.2 CVE

Problem

Solution

Does this solution apply anywhere else?

• yes
• no

If yes, where?

Test Strategy

Testing done:

• Unit tests
• Integration tests
• System tests
• Manual tests

Release Plan

[BlueEldur]

LGTM.

but have you considered trying to base this off 10.0.x? as this fixes #578 by bringing in hive 2.3.9 right? didn't look into it carefully if 10.1.x is already fixed or what

[kpatelatwork]

LGTM.

but have you considered trying to base this off 10.0.x? as this fixes #578 by bringing in hive 2.3.9 right? didn't look into it carefully if 10.1.x is already fixed or what

@BlueEldur I tried basing on latest of 10.0.x and the build was failing so I was putting a lot of effort so I thought why not put the effort on latest of 11.1.x as Randall has suggested we use the latest storage common and latest connect-plugins common to get latest CVE fixes.

If the tests are passing do you see any reasons to not upgrade to 11.1.x?

[BlueEldur]

LGTM.
but have you considered trying to base this off 10.0.x? as this fixes #578 by bringing in hive 2.3.9 right? didn't look into it carefully if 10.1.x is already fixed or what

@BlueEldur I tried basing on latest of 10.0.x and the build was failing so I was putting a lot of effort so I thought why not put the effort on latest of 11.1.x as Randall has suggested we use the latest storage common and latest connect-plugins common to get latest CVE fixes.

If the tests are passing do you see any reasons to not upgrade to 11.1.x?

what I meant is merging to 10.0.x. But yeah, no need to go that far back. LGTM