Upgrade jackson-databind for CVE-2019-14379

See FasterXML/jackson-databind#2387 for details. Change-Id: I3a8a416bba7e72861512531a3a83d818daf6fd5f Signed-off-by: Stephen Kitt <[email protected]> Signed-off-by: Robert Varga <[email protected]>
opendaylight · Aug 14, 2019 · c242f8c · c242f8c
1 parent aa1d469
commit c242f8c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/features/odl-jackson-2.8/src/main/history/dependencies.xml b/features/odl-jackson-2.8/src/main/history/dependencies.xml
@@ -3,7 +3,7 @@
     <feature version="0.0.0">
         <bundle>mvn:com.fasterxml.jackson.core/jackson-annotations/2.8.0</bundle>
         <bundle>mvn:com.fasterxml.jackson.core/jackson-core/2.8.11</bundle>
-        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.8.11.3</bundle>
+        <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/2.8.11.4</bundle>
         <bundle>mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.8.11</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.8.11</bundle>
         <bundle>mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.8.11</bundle>

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
@@ -468,7 +468,7 @@
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.8.11.20181123</version>
+        <version>2.8.11.20190726</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>