Skip to content
This repository has been archived by the owner on Mar 21, 2022. It is now read-only.

Commit

Permalink
Upgrade jackson deps to from 2.9.6 to latest 2.9.8
Browse files Browse the repository at this point in the history
This patches a vulnerability in jackson-databind

* CVE-2018-19360
* CVE-2018-19362
* CVE-2018-19361
* CVE-2018-14718
* CVE-2018-14721
* CVE-2018-14719
* CVE-2018-14720

Upgrade the other jackson deps to the same latest version for consistency.
  • Loading branch information
davidxia committed Jan 15, 2019
1 parent d6e17c2 commit f8d8618
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -89,17 +89,17 @@
<dependency>
<groupId>com.fasterxml.jackson.jaxrs</groupId>
<artifactId>jackson-jaxrs-json-provider</artifactId>
<version>2.9.6</version>
<version>2.9.8</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.datatype</groupId>
<artifactId>jackson-datatype-guava</artifactId>
<version>2.9.6</version>
<version>2.9.8</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.9.6</version>
<version>2.9.8</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.core</groupId>
Expand Down

0 comments on commit f8d8618

Please sign in to comment.