MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

upgrade jackson-databind and commons-beanutils for CVEs

Browse Source 
Signed-off-by: Shen-Ta Hsieh <ibmibmibm.tw@gmail.com>
This commit is contained in:
Shen-Ta Hsieh
2019-08-31 15:40:59 +08:00
parent 16c1e42b97
commit 394dfa1ce7
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
airsonic-main/pom.xml
+1
View File
@@ -426,6 +426,7 @@
<dependency>
<groupId>commons-beanutils</groupId>
<artifactId>commons-beanutils</artifactId>
<version>1.9.4</version>
<!-- commons-configuration2 requires during runtime -->
<scope>runtime</scope>
</dependency>
pom.xml
+3 -4
View File
@@ -17,7 +17,6 @@
<failOnDependencyWarning>true</failOnDependencyWarning>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<cxf.version>3.3.1</cxf.version>
<jackson.version>2.9.9</jackson.version>
<tomcat.version>8.5.42</tomcat.version>
</properties>
@@ -114,17 +113,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>${jackson.version}</version>
<version>2.9.9</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>${jackson.version}</version>
<version>2.9.9.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
<version>${jackson.version}</version>
<version>2.9.9</version>
</dependency>
<dependency>
<groupId>com.google.guava</groupId>