Skip to content

Fixed JENKINS-59379: Update jackson via BOM import - #427

Open
msymons wants to merge 1 commit into
jenkinsci:masterfrom
msymons:master
Open

Fixed JENKINS-59379: Update jackson via BOM import#427
msymons wants to merge 1 commit into
jenkinsci:masterfrom
msymons:master

Conversation

@msymons

@msymonsmsymons commented Sep 15, 2019

Copy link
Copy Markdown
  • Change property name from jackson-databind.version to jackson.version
  • Replace jackson modules in dependencyManagement by jackson-bom POM import
  • Use version 2.9.9.20190807. This gives jackson-databind 2.9.9.3 with fixes for four CVE

@msymons
[JENKINS-59379] Update jackson via BOM import
c8edd80
* Change property name from jackson-databind.version to jackson.version
* Replace jackson modules in dependencyManagement by jackson-bom POM import
* Use version 2.9.9.20190807. This gives jackson-databind 2.9.9.3 with fixes for four CVE
@khmarbaise
khmarbaise self-requested a review September 16, 2019 20:03
@khmarbaisekhmarbaise added Dependency Upgrade Upgraded dependency security Possible security findings labels Sep 16, 2019
@khmarbaisekhmarbaise added this to the Release 0.4.0 milestone Sep 16, 2019
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@khmarbaisekhmarbaiseAwaiting requested review from khmarbaise

Assignees

No one assigned

Labels

Dependency UpgradeUpgraded dependencysecurityPossible security findings

Projects

None yet

Milestone

Release 0.4.0

Development

Successfully merging this pull request may close these issues.

2 participants

@msymons@khmarbaise