From 5bb7f86631135097d141c5fe02743552aaba9316 Mon Sep 17 00:00:00 2001
From: Stephen Kitt <skitt@redhat.com>
Date: Thu, 8 Aug 2019 14:04:15 +0200
Subject: [PATCH] Upgrade jackson-databind for CVE-2019-14379

See https://github.com/FasterXML/jackson-databind/issues/2387 for
details.

Change-Id: I3a8a416bba7e72861512531a3a83d818daf6fd5f
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
---
 features/odl-jackson-2.9/src/main/history/dependencies.xml | 2 +-
 odlparent-dependency-check/pom.xml                         | 2 +-
 odlparent/pom.xml                                          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/features/odl-jackson-2.9/src/main/history/dependencies.xml b/features/odl-jackson-2.9/src/main/history/dependencies.xml
index ab5cd2d1f7..b5c275a013 100644
--- a/features/odl-jackson-2.9/src/main/history/dependencies.xml
+++ b/features/odl-jackson-2.9/src/main/history/dependencies.xml
@@ -5,7 +5,7 @@
         <feature>odl-ws-rs-api</feature>
         <bundle>mvn:com.fasterxml.jackson.core/jackson-annotations/2.9.0</bundle>
         <bundle>mvn:com.fasterxml.jackson.core/jackson-core/2.9.9</bundle>
-        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.9.9</bundle>
+        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.9.9.3</bundle>
         <bundle>mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.9.9</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.9.9</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.9.9</bundle>
diff --git a/odlparent-dependency-check/pom.xml b/odlparent-dependency-check/pom.xml
index d94121fd41..bd68f58ca2 100644
--- a/odlparent-dependency-check/pom.xml
+++ b/odlparent-dependency-check/pom.xml
@@ -45,7 +45,7 @@
             <groupId>com.fasterxml.jackson</groupId>
             <artifactId>jackson-bom</artifactId>
             <type>pom</type>
-            <version>2.9.9</version>
+            <version>2.9.9.20190807</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.woodstox</groupId>
diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index 3409698243..bc33ceac71 100644
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -453,7 +453,7 @@
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.9.9</version>
+        <version>2.9.9.20190807</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>