You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@olingo.apache.org by mi...@apache.org on 2022/08/26 15:52:00 UTC

[olingo-odata4] branch master updated: [OLINGO-1582] Remove CVE-2020-36518

This is an automated email from the ASF dual-hosted git repository.

mibo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/olingo-odata4.git


The following commit(s) were added to refs/heads/master by this push:
     new b49a932bf [OLINGO-1582] Remove CVE-2020-36518
b49a932bf is described below

commit b49a932bfedb0ad41f52c7d0b1801144184a607b
Author: Daniel Heid <ma...@daniel-heid.de>
AuthorDate: Thu Aug 18 09:57:06 2022 +0200

    [OLINGO-1582] Remove CVE-2020-36518
    
    Jackson 2.13.3 contains this vulnerability: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 22e381d97..c4ba90b9f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -90,8 +90,8 @@
     <maven.bundle.plugin.version>2.5.4</maven.bundle.plugin.version>
     <hc.client.version>4.5.13</hc.client.version>
     <hc.core.version>4.4.11</hc.core.version>
-    <jackson.version>2.13.1</jackson.version>
-    <jackson-databind.version>2.13.1</jackson-databind.version>
+    <jackson.version>2.13.3</jackson.version>
+    <jackson-databind.version>2.13.3</jackson-databind.version>
     <aalto-xml.version>1.3.1</aalto-xml.version>
     <xmlunit.version>1.6</xmlunit.version>
     <mockito-all.version>1.9.5</mockito-all.version>