FIX(CVEs) Jackson-databind version update 2.9.8+

rh-messaging · Jan 10, 2019 · f4ab49c · f4ab49c
1 parent 6db6e4d
commit f4ab49c
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/bom/pom.xml b/bom/pom.xml
@@ -36,7 +36,7 @@
         <slfj.version>1.7.25</slfj.version>
         <jopt.version>5.0.4</jopt.version>
         <dagger.version>2.17</dagger.version>
-        <jackson.version>2.9.7</jackson.version>
+        <jackson.version>2.9.8</jackson.version>
 
         <kotlin.version>1.2.61</kotlin.version>
         <junit.jupiter.version>5.3.1</junit.jupiter.version>

diff --git a/jmslib/pom.xml b/jmslib/pom.xml
@@ -40,6 +40,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
         </dependency>
 
         <dependency>

diff --git a/lib/pom.xml b/lib/pom.xml
@@ -40,6 +40,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
         </dependency>
 
         <!--scope provided means that it is a compileOnly dependency-->