Skip to content
This repository was archived by the owner on Mar 8, 2020. It is now read-only.

Commit ce9b78f

Browse files
committed
native: bump jackson-databind version to mitigate 11 CVEs
Signed-off-by: Alexander Bezzubov <[email protected]>
1 parent ac4e93c commit ce9b78f

File tree

1 file changed

+4
-10
lines changed

1 file changed

+4
-10
lines changed

native/pom.xml

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,7 @@
3838
<version>3.4</version>
3939
<scope>test</scope>
4040
</dependency>
41+
4142
<dependency>
4243
<groupId>org.eclipse.jdt</groupId>
4344
<artifactId>org.eclipse.jdt.core</artifactId>
@@ -61,17 +62,17 @@
6162
<dependency>
6263
<groupId>com.fasterxml.jackson.core</groupId>
6364
<artifactId>jackson-databind</artifactId>
64-
<version>2.8.6</version>
65+
<version>[2.8.11.3,)</version>
6566
</dependency>
6667
<dependency>
6768
<groupId>com.fasterxml.jackson.core</groupId>
6869
<artifactId>jackson-core</artifactId>
69-
<version>2.8.6</version>
70+
<version>[2.8.11.3,)</version>
7071
</dependency>
7172
<dependency>
7273
<groupId>com.fasterxml.jackson.core</groupId>
7374
<artifactId>jackson-annotations</artifactId>
74-
<version>2.8.6</version>
75+
<version>[2.8.11.3,)</version>
7576
</dependency>
7677
</dependencies>
7778
<build>
@@ -114,13 +115,6 @@
114115
</archive>
115116
</configuration>
116117
</plugin>
117-
<plugin>
118-
<groupId>org.apache.maven.plugins</groupId>
119-
<artifactId>maven-surefire-plugin</artifactId>
120-
<configuration>
121-
<useSystemClassLoader>false</useSystemClassLoader>
122-
</configuration>
123-
</plugin>
124118
</plugins>
125119
</build>
126120
</project>

0 commit comments

Comments
 (0)