Merge pull request #55 from tnagao7/update-libs

Update jackson-databind and commons-codec
fujitsu · Jul 12, 2022 · ad4adbb · ad4adbb
2 parents e3ffecd + 2ee7866
commit ad4adbb
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/launcher-impl/glassfish/pom.xml b/launcher-impl/glassfish/pom.xml
@@ -339,6 +339,17 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <!-- Use newer jackson-databind for security fix -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
         <dependency>
             <groupId>org.glassfish.main.extras</groupId>
             <artifactId>glassfish-embedded-web</artifactId>

diff --git a/pom.xml b/pom.xml
@@ -100,6 +100,8 @@
         <concurrent-api.version>2.0.0</concurrent-api.version>
         <concurrent-ri.version>2.0.0</concurrent-ri.version>
         <jakarta.validation.version>3.0.0</jakarta.validation.version>
+        <jackson.databind.version>2.13.2.2</jackson.databind.version>
+        <commons.codec.version>1.13</commons.codec.version>
     </properties>
 
     <dependencyManagement>
@@ -407,6 +409,18 @@
                 <artifactId>jakarta.validation-api</artifactId>
                 <version>${jakarta.validation.version}</version>
             </dependency>
+            <!-- jackson -->
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>${jackson.databind.version}</version>
+            </dependency>
+            <!-- commons-codec -->
+            <dependency>
+                <groupId>commons-codec</groupId>
+                <artifactId>commons-codec</artifactId>
+                <version>${commons.codec.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>