Fix: updated jackson-databind to 2.10.0.pr3 to block CVE-2019-14540

danbrodsky · lbalmaceda · commit 7adb0cfaf651 · 2019-09-24T11:02:47.000-03:00
diff --git a/lib/build.gradle b/lib/build.gradle
@@ -34,7 +34,7 @@ compileJava {
 }
 
 dependencies {
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.10.0.pr3'
     implementation 'commons-codec:commons-codec:1.12'
     testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'
     testImplementation 'junit:junit:4.12'

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ compileJava {`
`34`	`34`	`}`
`35`	`35`
`36`	`36`	`dependencies {`
`37`		`- implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'`
	`37`	`+ implementation 'com.fasterxml.jackson.core:jackson-databind:2.10.0.pr3'`
`38`	`38`	`implementation 'commons-codec:commons-codec:1.12'`
`39`	`39`	`testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'`
`40`	`40`	`testImplementation 'junit:junit:4.12'`