Merge pull request #66 from docusign/issue-65

Fix for issue #65

Author: mmallis87

CHANGELOG.md

@@ -7,6 +7,14 @@ See [DocuSign Support Center](https://support.docusign.com/en/releasenotes/) for
 ### Changed
 - Updated the package with the latest API monthly release.
 
+## [2.4.2] - 2018-03-22
+### Security
+- [CVE-2017-7525](https://www.cvedetails.com/cve/CVE-2017-7525/)
+- [CVE-2017-15095](https://www.cvedetails.com/cve/CVE-2017-15095/)
+
+### Updated
+- jackson library version updated to 2.9.4.
+
 ## [2.4.1] - 2018-03-21
 ### Updated
 - README code example description.

README.md

@@ -21,7 +21,7 @@ Add this dependency to your project's POM:
 <dependency>
    <groupId>com.docusign</groupId>
    <artifactId>docusign-esign-java</artifactId>
-   <version>2.4.1</version>
+   <version>2.4.2</version>
 </dependency>
 ```
 
@@ -30,7 +30,7 @@ Add this dependency to your project's POM:
 Add this dependency to your project's build file:
 
 ```groovy
-compile "com.docusign:docusign-esign-java:2.4.1"
+compile "com.docusign:docusign-esign-java:2.4.2"
 ```
 
 #### Dependencies
@@ -40,13 +40,14 @@ This client has the following external dependencies:
 * io.swagger:swagger-annotations:jar:1.5.8
 * com.sun.jersey:jersey-client:jar:1.19.1
 * com.sun.jersey.contribs:jersey-multipart:jar:1.19.1
-* com.fasterxml.jackson.core:jackson-core:jar:2.7.0
-* com.fasterxml.jackson.core:jackson-annotations:jar:2.7.0
-* com.fasterxml.jackson.core:jackson-databind:jar:2.7.0
-* com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.7.0
+* com.fasterxml.jackson.core:jackson-core:jar:2.9.4
+* com.fasterxml.jackson.core:jackson-annotations:jar:2.9.4
+* com.fasterxml.jackson.core:jackson-databind:jar:2.9.4
+* com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.9.4
 * com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.1.5
 * joda-time:joda-time:jar:2.9.3
 * com.brsanthu:migbase64:jar:2.2
+* org.apache.oltu.oauth2:org.apache.oltu.oauth2.client:1.0.2
 * junit:junit:jar:4.12
 
 #### Note for Android Developers 
@@ -72,8 +73,8 @@ android {
 
 This client is available through the following Java package managers:
 
-- [Nexus Repository Manager](https://oss.sonatype.org/#nexus-search;quick~docusign-esign-java) (oss.sonatype.org). You can search for com.docusign or docusign-esign-java. The current version is 2.4.1.
-- [JFrog Bintray](https://bintray.com/dsdevcenter/maven/docusign-esign-java) (bintray.com). You can search for com.docusign or docusign-esign-java. The current version is 2.4.1.
+- [Nexus Repository Manager](https://oss.sonatype.org/#nexus-search;quick~docusign-esign-java) (oss.sonatype.org). You can search for com.docusign or docusign-esign-java. The current version is 2.4.2.
+- [JFrog Bintray](https://bintray.com/dsdevcenter/maven/docusign-esign-java) (bintray.com). You can search for com.docusign or docusign-esign-java. The current version is 2.4.2.
 
 
 Usage

build.gradle

@@ -2,7 +2,7 @@ apply plugin: 'idea'
 apply plugin: 'eclipse'
 
 group = 'com.docusign'
-version = '2.4.1'
+version = '2.4.2'
 
 buildscript {
     repositories {
@@ -97,10 +97,11 @@ if(hasProperty('target') && target == 'android') {
 
 ext {
     swagger_annotations_version = "1.5.8"
-    jackson_version = "2.7.0"
+    jackson_version = "2.9.4"
     jersey_version = "1.19.1"
     jodatime_version = "2.9.3"
     junit_version = "4.12"
+    oltu_version = "1.0.2"
 }
 
 dependencies {
@@ -114,5 +115,6 @@ dependencies {
     compile "com.fasterxml.jackson.datatype:jackson-datatype-joda:2.1.5"
     compile "joda-time:joda-time:$jodatime_version"
     compile "com.brsanthu:migbase64:2.2"
+    compile "org.apache.oltu.oauth2:org.apache.oltu.oauth2.client:$oltu_version"
     testCompile "junit:junit:$junit_version"
 }

pom.xml

@@ -5,7 +5,7 @@
   <artifactId>docusign-esign-java</artifactId>
   <packaging>jar</packaging>
   <name>docusign-esign-java</name>
-  <version>2.4.1</version>
+  <version>2.4.2</version>
   <description>The official DocuSign eSignature JAVA client is based on version 2 of the DocuSign REST API and provides libraries for JAVA application integration. It is recommended that you use this version of the library for new development.</description>
   <url>https://www.docusign.com/developer-center</url>
 
@@ -268,7 +268,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <swagger-annotations-version>1.5.8</swagger-annotations-version>
     <jersey-version>1.19.1</jersey-version>
-    <jackson-version>2.7.0</jackson-version>
+    <jackson-version>2.9.4</jackson-version>
     <jodatime-version>2.9.3</jodatime-version>
     <maven-plugin-version>1.0.0</maven-plugin-version>
     <junit-version>4.12</junit-version>

target/maven-archiver/pom.properties

@@ -1,5 +1,5 @@
 #Generated by Maven
 #Wed Mar 21 11:55:03 PDT 2018
-version=2.4.1
+version=2.4.2
 groupId=com.docusign
 artifactId=docusign-esign-java