Upgrade jackson-databind for CVE-2019-14379

See FasterXML/jackson-databind#2387 for details. Change-Id: I3a8a416bba7e72861512531a3a83d818daf6fd5f Signed-off-by: Stephen Kitt <skitt@redhat.com> Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
opendaylight · Aug 14, 2019 · 5bb7f86 · 5bb7f86
1 parent 69377d2
commit 5bb7f86
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/features/odl-jackson-2.9/src/main/history/dependencies.xml b/features/odl-jackson-2.9/src/main/history/dependencies.xml
@@ -5,7 +5,7 @@
         <feature>odl-ws-rs-api</feature>
         <bundle>mvn:com.fasterxml.jackson.core/jackson-annotations/2.9.0</bundle>
         <bundle>mvn:com.fasterxml.jackson.core/jackson-core/2.9.9</bundle>
-        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.9.9</bundle>
+        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.9.9.3</bundle>
         <bundle>mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.9.9</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.9.9</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.9.9</bundle>

diff --git a/odlparent-dependency-check/pom.xml b/odlparent-dependency-check/pom.xml
@@ -45,7 +45,7 @@
             <groupId>com.fasterxml.jackson</groupId>
             <artifactId>jackson-bom</artifactId>
             <type>pom</type>
-            <version>2.9.9</version>
+            <version>2.9.9.20190807</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.woodstox</groupId>

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
@@ -453,7 +453,7 @@
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.9.9</version>
+        <version>2.9.9.20190807</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>