fix azure jackson-databind vulnerability

Change details

• upgrade jackson-databind to 2.15.2

Changes in:

• GCP
• Azure
• AWS
• IBM

changed milestone to %M21 - Release 0.24

added Azure Vulnerability Management labels

assigned to @vidya

added 1 commit

• 21aab714 - update notice

Compare with previous version

changed title from Draft: fix jackson-databind vulnerability to Draft: fix azure jackson-databind vulnerability

changed the description

marked this merge request as ready

Hello @Srinivasan_Narayanan - Kindly review and approve the vulnerability remediation MR (Azure only changes).

• Pipeline all azure related jobs are passed, other failed jobs are unrelated to MR (since the changes are only in Azure).
• Verified the remediation by mvn dependency:tree
• Trivy container_scanning job - jackson-databind dependency is not listed in the vulnerability list

cc: @chad @nursheikh @lucynliu @thulasi_dass

Thanks!

approved this merge request

mentioned in commit 7a87a07f

merged