Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) (#4779)

[kotwanikunal]

Signed-off-by: Andriy Redko [email protected]

Signed-off-by: Andriy Redko [email protected]
(cherry picked from commit 12f26d3)

Description

• Backports Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) #4779
• See please GHSA-jjjh-jjxp-wpff ([2.13.x] Add check in primitive value deserializers to avoid deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS [CVE-2022-42003] FasterXML/jackson-databind#3621)

Issues Resolved

N/A

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff
• Commit changes are listed out in CHANGELOG.md file (See: Changelog)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[github-actions]

Gradle Check (Jenkins) Run Completed with:

• RESULT: UNSTABLE ❌
• URL: https://build.ci.opensearch.org/job/gradle-check/4638/
• CommitID: 4d238f7

[github-actions]

Gradle Check (Jenkins) Run Completed with:

• RESULT: SUCCESS ✅
• URL: https://build.ci.opensearch.org/job/gradle-check/4639/
• CommitID: e6d9712

[codecov-commenter]

Codecov Report

Merging #4782 (e6d9712) into 1.x (2d70e5c) will increase coverage by 0.02%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                1.x    #4782      +/-   ##
============================================
+ Coverage     77.88%   77.90%   +0.02%     
- Complexity    63417    63464      +47     
============================================
  Files          4453     4453              
  Lines        275011   275011              
  Branches      41172    41172              
============================================
+ Hits         214181   214260      +79     
+ Misses        43897    43892       -5     
+ Partials      16933    16859      -74     

Impacted Files	Coverage Δ
.../action/ingest/SimulatePipelineRequestBuilder.java	0.00% <0.00%> (-50.00%)	⬇️
...java/org/opensearch/script/ScriptContextStats.java	33.33% <0.00%> (-40.01%)	⬇️
...h/action/ingest/SimulateDocumentVerboseResult.java	60.71% <0.00%> (-39.29%)	⬇️
.../opensearch/index/stats/IndexingPressureStats.java	61.03% <0.00%> (-35.07%)	⬇️
...search/index/stats/ShardIndexingPressureStats.java	42.30% <0.00%> (-30.77%)	⬇️
...nsearch/test/engine/ThrowingLeafReaderWrapper.java	30.00% <0.00%> (-30.00%)	⬇️
...min/cluster/tasks/PendingClusterTasksResponse.java	35.00% <0.00%> (-25.00%)	⬇️
...va/org/opensearch/monitor/process/ProcessInfo.java	68.00% <0.00%> (-24.00%)	⬇️
.../node/reload/NodesReloadSecureSettingsRequest.java	65.51% <0.00%> (-20.69%)	⬇️
...ain/java/org/opensearch/geometry/MultiPolygon.java	80.00% <0.00%> (-20.00%)	⬇️
... and 469 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.