Skip to content

Conversation

TheSnoozer
Copy link
Collaborator

upgrade com.fasterxml.jackson.core:jackson-databind from 2.9.9.3 to 2.9.10 in order to fix CVE-2019-14540 and CVE-2019-16335

@TheSnoozer TheSnoozer added this to the 3.0.2 milestone Sep 26, 2019
@TheSnoozer
Copy link
Collaborator Author

The Travis Failures makes no sense for me.
I asked on the travis-ci.community for advice. For me it seems that travis can’t find com.fasterxml.jackson.core:jackson-databind:jar:2.9.10 even though it’s published in maven central. However the issue seems only present with maven 3.2.5 and below.

@TheSnoozer
Copy link
Collaborator Author

Travis working again, issue seems to been have caused by a sync issue.

@TheSnoozer TheSnoozer merged commit 2c6c5a5 into git-commit-id:master Sep 28, 2019
@TheSnoozer TheSnoozer modified the milestones: 3.0.2, 4.0-modularized Oct 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant