Fix security issue with dependencies (#1820)

* fix security issue with dependency * update samples * update pom and sample
2025-12-22 05:17:07 +00:00 · 2019-01-05 23:30:59 +08:00
parent b25eeebf03
commit 1a2deb016b
53 changed files with 65 additions and 50 deletions
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    {{#threetenbp}}
    threepane_version = "2.6.4"
    {{/threetenbp}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.sbt.mustache
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-{{^java8}}joda{{/java8}}{{#java8}}jsr310{{/java8}}" % "2.8.7" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/pom.mustache
@@ -303,7 +303,7 @@
        <feign-version>{{#useFeign10}}10.0.1{{/useFeign10}}{{^useFeign10}}9.4.0{{/useFeign10}}</feign-version>
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        {{#threetenbp}}
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        {{/threetenbp}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    google_api_client_version = "1.23.0"
    jersey_common_version = "2.25.1"
    jodatime_version = "2.9.9"
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache
@@ -14,7 +14,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.core" % "jersey-common" % "2.25.1",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      {{#withXml}}
      "com.fasterxml.jackson.dataformat" % "jackson-dataformat-xml" % "2.8.9" % "compile",
      {{/withXml}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache
@@ -296,7 +296,7 @@
        <google-api-client-version>1.23.0</google-api-client-version>
        <jersey-common-version>2.25.1</jersey-common-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        {{#joda}}
        <jodatime-version>2.9.9</jodatime-version>
        {{/joda}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache
@@ -120,7 +120,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    {{#supportJava6}}
    jersey_version = "2.6"
    commons_io_version=2.5
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.media" % "jersey-media-json-jackson" % {{#supportJava6}}"2.6"{{/supportJava6}}{{^supportJava6}}"2.25.1"{{/supportJava6}},
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      {{#joda}}
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.8.9" % "compile",
      {{/joda}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache
@@ -333,7 +333,7 @@
        <commons_lang3_version>3.6</commons_lang3_version>
        {{/supportJava6}}
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        {{#threetenbp}}
        <threetenbp-version>2.6.4</threetenbp-version>
        {{/threetenbp}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache
@@ -120,7 +120,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    threetenbp_version = "2.6.4"
    resteasy_version = "3.1.3.Final"
    {{^java8}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.jboss.resteasy" % "resteasy-jackson2-provider" % "3.1.3.Final" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      {{#java8}}
      "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" % "2.8.6" % "compile",
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache
@@ -267,7 +267,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <resteasy-version>3.1.3.Final</resteasy-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <threetenbp-version>2.6.4</threetenbp-version>
        {{^java8}}
        <jodatime-version>2.9.9</jodatime-version>
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    spring_web_version = "4.3.9.RELEASE"
    jodatime_version = "2.9.9"
    junit_version = "4.12"
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache
@@ -298,7 +298,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <spring-web-version>4.3.9.RELEASE</spring-web-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        {{#joda}}
        <jodatime-version>2.9.9</jodatime-version>
        {{/joda}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache
@@ -132,7 +132,7 @@ ext {
    {{/play25}}
    {{#play26}}
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11"
+    jackson_databind_version = "2.8.11.3"
    play_version = "2.6.7"
    {{/play26}}
    {{/usePlayWS}}
@@ -187,6 +187,7 @@ dependencies {
    compile "com.squareup.retrofit2:converter-jackson:$retrofit_version"
    compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
    compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
    compile "com.fasterxml.jackson.datatype:jackson-datatype-{{^java8}}joda{{/java8}}{{#java8}}jsr310{{/java8}}:$jackson_version"
    {{/usePlayWS}}

--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache
@@ -32,7 +32,7 @@ lazy val root = (project in file(".")).
      "javax.validation" % "validation-api" % "1.1.0.Final" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      {{/play26}}
      "com.squareup.retrofit2" % "converter-jackson" % "2.3.0" % "compile",
      {{/usePlayWS}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache
@@ -287,7 +287,7 @@
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
-                <version>${jackson-version}</version>
+                <version>${jackson-databind-version}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.datatype</groupId>
@@ -354,6 +354,7 @@
        <gson-fire-version>1.8.0</gson-fire-version>
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        {{#usePlayWS}}
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        {{#play24}}
        <jackson-version>2.6.6</jackson-version>
        <play-version>2.4.11</play-version>
--- a/modules/openapi-generator/src/main/resources/Java/libraries/webclient/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/webclient/pom.mustache
@@ -132,7 +132,7 @@
        <swagger-annotations-version>1.5.20</swagger-annotations-version>
        <spring-web-version>5.0.7.RELEASE</spring-web-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <junit-version>4.12</junit-version>
        <reactor-version>3.1.8.RELEASE</reactor-version>
        <reactor-netty-version>0.7.8.RELEASE</reactor-netty-version>
--- a/modules/openapi-generator/src/main/resources/undertow/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/undertow/pom.mustache
@@ -17,7 +17,7 @@
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <version.framework>0.1.1</version.framework>
        <version.jackson>2.8.11</version.jackson>
-        <version.jackson.databind>2.8.11.2</version.jackson.databind>
+        <version.jackson.databind>2.8.11.3</version.jackson.databind>
        <version.slf4j>1.7.21</version.slf4j>
        <version.jose4j>0.5.2</version.jose4j>
        <version.antlr4>4.5.3</version.antlr4>