You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2022/10/13 12:53:07 UTC
[cxf] 01/02: Update Jackson Databind to 2.13.4.1 (CVE-2022-42003)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 53ddfd845f0861af21cf80ba903b0e10b4d97dca
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu Oct 13 08:51:40 2022 -0400
Update Jackson Databind to 2.13.4.1 (CVE-2022-42003)
(cherry picked from commit 07d4d658494ab19860932d6ec83059c7ab9443cb)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 911e1b8999..a1a5661586 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -128,7 +128,7 @@
<cxf.httpcomponents.client5.version>5.1.2</cxf.httpcomponents.client5.version>
<cxf.httpcomponents.core5.version>5.1.3</cxf.httpcomponents.core5.version>
<cxf.jackson.version>2.13.4</cxf.jackson.version>
- <cxf.jackson.databind.version>2.13.4</cxf.jackson.databind.version>
+ <cxf.jackson.databind.version>2.13.4.1</cxf.jackson.databind.version>
<cxf.jacorb.version>3.9</cxf.jacorb.version>
<cxf.jaeger.version>1.8.1</cxf.jaeger.version>
<cxf.jakarta.activation.version>1.2.2</cxf.jakarta.activation.version>