From 6b310592bc518b448db37e80e827c6ea19f2ecd8 Mon Sep 17 00:00:00 2001 From: jjuaniveson-gresham Date: Mon, 9 May 2022 12:43:09 +0100 Subject: [PATCH 1/2] DWN-39872: updated jackson-databind version to fix vulnerability --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 4feae4676..26c03ccf5 100644 --- a/pom.xml +++ b/pom.xml @@ -348,7 +348,7 @@ com.fasterxml.jackson.core jackson-databind - 2.13.1 + 2.13.2.1 com.fasterxml.jackson.core From 22a2cb884a6a8616f26c5bbec6223688759c9d7e Mon Sep 17 00:00:00 2001 From: Harry Smith Date: Tue, 17 May 2022 12:28:36 +0100 Subject: [PATCH 2/2] DWN-39872 : upgrade jackson components to 2.13.3 --- CHANGELOG.md | 3 ++- pom.xml | 4 ++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 487207669..267ae4e06 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,6 @@ Unreleased: -- Updated JDK to Corretto 1.8.302 +- Updated JDK to Corretto 1.8.332 +- Uprgaded Jackson Components to 2.13.3 *1.3.3-GRESHAM: - Upgraded libraries with known vulnerabilities diff --git a/pom.xml b/pom.xml index 26c03ccf5..1de4f798d 100644 --- a/pom.xml +++ b/pom.xml @@ -348,12 +348,12 @@ com.fasterxml.jackson.core jackson-databind - 2.13.2.1 + 2.13.3 com.fasterxml.jackson.core jackson-annotations - 2.13.1 + 2.13.3