diff options
| author |   liamfallon <liam.fallon@est.tech> | 2020-06-21 21:52:55 +0100 |
|---|---|---|
| committer | liamfallon <liam.fallon@est.tech> | 2020-06-23 13:12:00 +0100 |
| commit | ff86f98e38f3df388ff3dfa3b3bd995707d05b9b (patch) | |
| tree | 0a4cb6bd70b4ef327402ba407c491aef763b5e00 /pom.xml | |
| parent | 9c0c0c8f61a08aec5c95ebb90647a0aae445e129 (diff) | |
Remove apex-pdp Jackson security issue
We should use the managed version of jackson from policy-parent rather
than a specific apex-pdp version.
Also upgrade the version of Avro, avro 1.9.2 uses a newer somewhat more
secure version of Jackson.
Issue-ID: POLICY-1508
Change-Id: If32218816ae76cf3cf6ddc8980e3a37e7e2ffd19
Signed-off-by: liamfallon <liam.fallon@est.tech>
Diffstat (limited to 'pom.xml')
| -rw-r--r-- | pom.xml | 15 |
1 files changed, 2 insertions, 13 deletions
@@ -45,9 +45,8 @@ <version.commons-cli>1.4</version.commons-cli> <version.kafka>2.3.0</version.kafka> <version.hibernate>5.3.7.Final</version.hibernate> - <version.policy.common>1.6.5</version.policy.common> - <version.policy.models>2.2.6</version.policy.models> - <version.jackson>2.10.0.pr3</version.jackson> + <version.policy.common>1.7.0-SNAPSHOT</version.policy.common> + <version.policy.models>2.3.0-SNAPSHOT</version.policy.models> <version.jgroups>4.1.5.Final</version.jgroups> <version.commons-codec>20041127.091804</version.commons-codec> <version.caffeine>2.8.0</version.caffeine> @@ -111,16 +110,6 @@ <artifactId>policy-endpoints</artifactId> <version>${version.policy.common}</version> </dependency> - <dependency> - <groupId>com.fasterxml.jackson.core</groupId> - <artifactId>jackson-core</artifactId> - <version>${version.jackson}</version> - </dependency> - <dependency> - <groupId>com.fasterxml.jackson.core</groupId> - <artifactId>jackson-databind</artifactId> - <version>${version.jackson}</version> - </dependency> <dependency> <groupId>org.jgroups</groupId> <artifactId>jgroups</artifactId> |