demus/openhab-core
1
0
Fork 0
mirror of https://github.com/danieldemus/openhab-core.git synced 2025-01-10 21:31:53 +01:00
Code Issues 1 Packages Projects Releases Wiki Activity

Bump jackson to 2.12.6(.1) (#2933)

Browse Source 
The `jackson-databind` bundle contains a vulnerability that is fixed in version 2.12.6.1. This version is only available for that bundle, all other bundles are still available as 2.12.6.

Signed-off-by: Jan N. Klug <github@klug.nrw>
This commit is contained in:
J-N-K 2022-04-26 19:47:34 +02:00 committed by GitHub
parent bb634b9189
commit 0ea6feef72
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
bom/runtime/pom.xml
View File

@ -17,7 +17,8 @@
<properties> <properties>
<cxf.version>3.4.5</cxf.version> <cxf.version>3.4.5</cxf.version>
<jackson.version>2.12.5</jackson.version> <!-- revert version of jackson-databind to ${jackson.version} when versions are in-line again -->
<jackson.version>2.12.6</jackson.version>
<jetty.version>9.4.43.v20210629</jetty.version> <jetty.version>9.4.43.v20210629</jetty.version>
<pax.logging.version>2.0.14</pax.logging.version> <pax.logging.version>2.0.14</pax.logging.version>
<pax.web.version>7.3.23</pax.web.version> <pax.web.version>7.3.23</pax.web.version>
@ -954,7 +955,8 @@
<dependency> <dependency>
<groupId>com.fasterxml.jackson.core</groupId> <groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId> <artifactId>jackson-databind</artifactId>
<version>${jackson.version}</version> <!-- revert to ${jackson.version} when versions are in-line again -->
<version>2.12.6.1</version>
<scope>compile</scope> <scope>compile</scope>
</dependency> </dependency>
<dependency> <dependency>

22
features/karaf/openhab-tp/src/main/feature/feature.xml
View File

@ -82,17 +82,17 @@
</feature> </feature>
<feature name="openhab.tp-jackson" description="FasterXML Jackson bundles" version="${project.version}"> <feature name="openhab.tp-jackson" description="FasterXML Jackson bundles" version="${project.version}">
<capability>openhab.tp;feature=jackson;version=2.12.5</capability> <capability>openhab.tp;feature=jackson;version=2.12.6</capability>
<bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-annotations/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-annotations/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-core/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-core/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-databind/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.core/jackson-databind/2.12.6.1</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-base/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider/2.12.6</bundle>
<bundle dependency="true">mvn:com.fasterxml.jackson.module/jackson-module-jaxb-annotations/2.12.5</bundle> <bundle dependency="true">mvn:com.fasterxml.jackson.module/jackson-module-jaxb-annotations/2.12.6</bundle>
<bundle dependency="true">mvn:org.yaml/snakeyaml/1.27</bundle> <bundle dependency="true">mvn:org.yaml/snakeyaml/1.27</bundle>
</feature> </feature>