Fix: updated jackson-databind to 2.9.9.3

danbrodsky · web-flow · commit 0b2c8a716ca1 · 2019-08-08T19:48:17.000-07:00
blocks CVE-2019-12814, CVE-2019-14379 and CVE-2019-14439
diff --git a/lib/build.gradle b/lib/build.gradle
@@ -34,7 +34,7 @@ compileJava {
 }
 
 dependencies {
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.1'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'
     implementation 'commons-codec:commons-codec:1.12'
     testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'
     testImplementation 'junit:junit:4.12'

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ compileJava {`
`34`	`34`	`}`
`35`	`35`
`36`	`36`	`dependencies {`
`37`		`- implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.1'`
	`37`	`+ implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'`
`38`	`38`	`implementation 'commons-codec:commons-codec:1.12'`
`39`	`39`	`testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'`
`40`	`40`	`testImplementation 'junit:junit:4.12'`