From a2e2b510ce638c5d1ab02833ab64c61dd2c6f6cd Mon Sep 17 00:00:00 2001 From: Edwin Hobor Date: Tue, 29 Mar 2022 13:46:31 +0300 Subject: [PATCH 1/2] CVE-2020-36518 - Upgrade jackson-databind to 2.12.6.1 --- gradle/dependencies.gradle | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle index 3c317b53ba29b..4077a446c6caa 100644 --- a/gradle/dependencies.gradle +++ b/gradle/dependencies.gradle @@ -67,6 +67,7 @@ versions += [ httpclient: "4.5.13", easymock: "4.3", jackson: "2.12.6", + jacksonDatabind: "2.12.6.1", jacoco: "0.8.7", javassist: "3.27.0-GA", jetty: "9.4.44.v20210927", @@ -135,7 +136,7 @@ libs += [ commonsCli: "commons-cli:commons-cli:$versions.commonsCli", easymock: "org.easymock:easymock:$versions.easymock", jacksonAnnotations: "com.fasterxml.jackson.core:jackson-annotations:$versions.jackson", - jacksonDatabind: "com.fasterxml.jackson.core:jackson-databind:$versions.jackson", + jacksonDatabind: "com.fasterxml.jackson.core:jackson-databind:$versions.jacksonDatabind", jacksonDataformatCsv: "com.fasterxml.jackson.dataformat:jackson-dataformat-csv:$versions.jackson", jacksonModuleScala: "com.fasterxml.jackson.module:jackson-module-scala_$versions.baseScala:$versions.jackson", jacksonJDK8Datatypes: "com.fasterxml.jackson.datatype:jackson-datatype-jdk8:$versions.jackson", From b94fb807e59b4a6f7fc9df6e6b2567ee7fa8028a Mon Sep 17 00:00:00 2001 From: Edwin Hobor Date: Wed, 30 Mar 2022 12:17:55 +0300 Subject: [PATCH 2/2] Updated LICENSE-binary --- LICENSE-binary | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE-binary b/LICENSE-binary index 42a8d79f86c9c..72fa1a0a72636 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -210,7 +210,7 @@ commons-cli-1.4 commons-lang3-3.8.1 jackson-annotations-2.12.3 jackson-core-2.12.3 -jackson-databind-2.12.3 +jackson-databind-2.12.6.1 jackson-dataformat-csv-2.12.3 jackson-datatype-jdk8-2.12.3 jackson-jaxrs-base-2.12.3