Merge branch 'release/2.2.2'

imi-frankfurt · Nov 3, 2022 · 872a201 · 872a201
2 parents 4c89a94 + f1a6ae7
commit 872a201
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 9 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.2] - 2022-11-03
+### Security
+- Update dependencies, including jackson lib due to [CVE-2022-42003](https://devhub.checkmarx.com/cve-details/CVE-2022-42003/) and [CVE-2022-42004](https://devhub.checkmarx.com/cve-details/CVE-2022-42004/)
+
 ## [2.2.1] - 2022-11-03
 ### Fixed
 - There was a bug in the search function that occurred when private namespaces from other users are present [[#105](https://github.com/mig-frankfurt/dataelementhub.model/issues/105)]

diff --git a/pom.xml b/pom.xml
@@ -9,15 +9,15 @@
     <version>11.2.0</version>
   </parent>
   <artifactId>dehub-model</artifactId>
-  <version>2.2.1</version>
+  <version>2.2.2</version>
   <name>de.dataelementhub.model</name>
   <description>DataElementHub Model</description>
 
   <dependencies>
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.9.0</version>
+      <version>2.10</version>
     </dependency>
     <dependency>
       <groupId>de.dataelementhub</groupId>
@@ -46,7 +46,7 @@
     <dependency>
       <groupId>com.networknt</groupId>
       <artifactId>json-schema-validator</artifactId>
-      <version>1.0.70</version>
+      <version>1.0.73</version>
     </dependency>
     <dependency>
       <groupId>org.simpleflatmapper</groupId>
@@ -66,12 +66,12 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-annotations</artifactId>
-      <version>2.13.3</version>
+      <version>2.13.4</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>2.13.3</version>
+      <version>2.13.4.2</version>
     </dependency>
     <dependency>
       <artifactId>org.eclipse.persistence.moxy</artifactId>
@@ -81,7 +81,7 @@
     <dependency>
       <groupId>net.lingala.zip4j</groupId>
       <artifactId>zip4j</artifactId>
-      <version>2.10.0</version>
+      <version>2.11.2</version>
     </dependency>
     <dependency>
       <groupId>org.eclipse.persistence</groupId>
@@ -113,12 +113,12 @@
     <dependency>
       <groupId>org.json</groupId>
       <artifactId>json</artifactId>
-      <version>20220320</version>
+      <version>20220924</version>
     </dependency>
     <dependency>
       <groupId>org.apache.tomcat.embed</groupId>
       <artifactId>tomcat-embed-core</artifactId>
-      <version>10.0.20</version>
+      <version>10.1.0</version>
     </dependency>
     <dependency>
       <groupId>jakarta.xml.bind</groupId>
@@ -128,7 +128,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-core</artifactId>
-      <version>2.13.3</version>
+      <version>2.13.4</version>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>