Fix security issue with dependencies (#1820)

* fix security issue with dependency * update samples * update pom and sample
2019-01-05 23:30:59 +08:00
parent b25eeebf03
commit 1a2deb016b
53 changed files with 65 additions and 50 deletions
--- a/samples/client/petstore/java/feign/build.gradle
+++ b/samples/client/petstore/java/feign/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    threepane_version = "2.6.4"
    feign_version = "9.4.0"
    feign_form_version = "2.1.0"
--- a/samples/client/petstore/java/feign/build.sbt
+++ b/samples/client/petstore/java/feign/build.sbt
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.8.7" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/samples/client/petstore/java/feign/pom.xml
+++ b/samples/client/petstore/java/feign/pom.xml
@@ -270,7 +270,7 @@
        <feign-version>9.4.0</feign-version>
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        <junit-version>4.12</junit-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
--- a/samples/client/petstore/java/feign10x/build.gradle
+++ b/samples/client/petstore/java/feign10x/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    threepane_version = "2.6.4"
    feign_version = "10.0.1"
    feign_form_version = "2.1.0"
--- a/samples/client/petstore/java/feign10x/build.sbt
+++ b/samples/client/petstore/java/feign10x/build.sbt
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.8.7" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/samples/client/petstore/java/feign10x/pom.xml
+++ b/samples/client/petstore/java/feign10x/pom.xml
@@ -270,7 +270,7 @@
        <feign-version>10.0.1</feign-version>
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        <junit-version>4.12</junit-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
--- a/samples/client/petstore/java/google-api-client/build.gradle
+++ b/samples/client/petstore/java/google-api-client/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    google_api_client_version = "1.23.0"
    jersey_common_version = "2.25.1"
    jodatime_version = "2.9.9"
--- a/samples/client/petstore/java/google-api-client/build.sbt
+++ b/samples/client/petstore/java/google-api-client/build.sbt
@@ -14,7 +14,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.core" % "jersey-common" % "2.25.1",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "junit" % "junit" % "4.12" % "test",
      "com.novocode" % "junit-interface" % "0.10" % "test"
--- a/samples/client/petstore/java/google-api-client/pom.xml
+++ b/samples/client/petstore/java/google-api-client/pom.xml
@@ -248,7 +248,7 @@
        <google-api-client-version>1.23.0</google-api-client-version>
        <jersey-common-version>2.25.1</jersey-common-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
--- a/samples/client/petstore/java/jersey2-java6/build.sbt
+++ b/samples/client/petstore/java/jersey2-java6/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.6",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "com.brsanthu" % "migbase64" % "2.2",
      "org.apache.commons" % "commons-lang3" % "3.6",
--- a/samples/client/petstore/java/jersey2-java6/pom.xml
+++ b/samples/client/petstore/java/jersey2-java6/pom.xml
@@ -270,7 +270,7 @@
        <commons_io_version>2.5</commons_io_version>
        <commons_lang3_version>3.6</commons_lang3_version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <threetenbp-version>2.6.4</threetenbp-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
--- a/samples/client/petstore/java/jersey2-java8/build.gradle
+++ b/samples/client/petstore/java/jersey2-java8/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    jersey_version = "2.27"
    junit_version = "4.12"
 }
--- a/samples/client/petstore/java/jersey2-java8/build.sbt
+++ b/samples/client/petstore/java/jersey2-java8/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.25.1",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" % "2.8.9" % "compile",
      "junit" % "junit" % "4.12" % "test",
      "com.novocode" % "junit-interface" % "0.10" % "test"
--- a/samples/client/petstore/java/jersey2-java8/pom.xml
+++ b/samples/client/petstore/java/jersey2-java8/pom.xml
@@ -252,7 +252,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <jersey-version>2.27</jersey-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
    </properties>
--- a/samples/client/petstore/java/jersey2/build.gradle
+++ b/samples/client/petstore/java/jersey2/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    jersey_version = "2.27"
    junit_version = "4.12"
    threetenbp_version = "2.6.4"
--- a/samples/client/petstore/java/jersey2/build.sbt
+++ b/samples/client/petstore/java/jersey2/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.25.1",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "com.brsanthu" % "migbase64" % "2.2",
      "junit" % "junit" % "4.12" % "test",
--- a/samples/client/petstore/java/jersey2/pom.xml
+++ b/samples/client/petstore/java/jersey2/pom.xml
@@ -258,7 +258,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <jersey-version>2.27</jersey-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <threetenbp-version>2.6.4</threetenbp-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
--- a/samples/client/petstore/java/resteasy/build.gradle
+++ b/samples/client/petstore/java/resteasy/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    threetenbp_version = "2.6.4"
    resteasy_version = "3.1.3.Final"
    jodatime_version = "2.9.9"
--- a/samples/client/petstore/java/resteasy/build.sbt
+++ b/samples/client/petstore/java/resteasy/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "org.jboss.resteasy" % "resteasy-jackson2-provider" % "3.1.3.Final" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.6.4" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.7.5" % "compile",
      "joda-time" % "joda-time" % "2.9.9" % "compile",
--- a/samples/client/petstore/java/resteasy/pom.xml
+++ b/samples/client/petstore/java/resteasy/pom.xml
@@ -216,7 +216,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <resteasy-version>3.1.3.Final</resteasy-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <threetenbp-version>2.6.4</threetenbp-version>
        <jodatime-version>2.9.9</jodatime-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
--- a/samples/client/petstore/java/resttemplate-withXml/build.gradle
+++ b/samples/client/petstore/java/resttemplate-withXml/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    spring_web_version = "4.3.9.RELEASE"
    jodatime_version = "2.9.9"
    junit_version = "4.12"
--- a/samples/client/petstore/java/resttemplate-withXml/pom.xml
+++ b/samples/client/petstore/java/resttemplate-withXml/pom.xml
@@ -256,7 +256,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <spring-web-version>4.3.9.RELEASE</spring-web-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
--- a/samples/client/petstore/java/resttemplate/build.gradle
+++ b/samples/client/petstore/java/resttemplate/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.21"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11.2"
+    jackson_databind_version = "2.8.11.3"
    spring_web_version = "4.3.9.RELEASE"
    jodatime_version = "2.9.9"
    junit_version = "4.12"
--- a/samples/client/petstore/java/resttemplate/pom.xml
+++ b/samples/client/petstore/java/resttemplate/pom.xml
@@ -248,7 +248,7 @@
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
        <spring-web-version>4.3.9.RELEASE</spring-web-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-threetenbp-version>2.6.4</jackson-threetenbp-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
        <junit-version>4.12</junit-version>
--- a/samples/client/petstore/java/retrofit2-play24/build.gradle
+++ b/samples/client/petstore/java/retrofit2-play24/build.gradle
@@ -117,6 +117,7 @@ dependencies {
    compile "com.squareup.retrofit2:converter-jackson:$retrofit_version"
    compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
    compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
    compile "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:$jackson_version"

    testCompile "junit:junit:$junit_version"
--- a/samples/client/petstore/java/retrofit2-play24/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play24/pom.xml
@@ -241,7 +241,7 @@
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
-                <version>${jackson-version}</version>
+                <version>${jackson-databind-version}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.datatype</groupId>
@@ -268,6 +268,7 @@
        <maven.compiler.target>${java.version}</maven.compiler.target>
        <gson-fire-version>1.8.0</gson-fire-version>
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-version>2.6.6</jackson-version>
        <play-version>2.4.11</play-version>
        <retrofit-version>2.5.0</retrofit-version>
--- a/samples/client/petstore/java/retrofit2-play25/build.gradle
+++ b/samples/client/petstore/java/retrofit2-play25/build.gradle
@@ -119,6 +119,7 @@ dependencies {
    compile "com.squareup.retrofit2:converter-jackson:$retrofit_version"
    compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
    compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
    compile "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:$jackson_version"

    testCompile "junit:junit:$junit_version"
--- a/samples/client/petstore/java/retrofit2-play25/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play25/pom.xml
@@ -246,7 +246,7 @@
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
-                <version>${jackson-version}</version>
+                <version>${jackson-databind-version}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.datatype</groupId>
@@ -273,6 +273,7 @@
        <maven.compiler.target>${java.version}</maven.compiler.target>
        <gson-fire-version>1.8.0</gson-fire-version>
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-version>2.7.8</jackson-version>
        <play-version>2.5.15</play-version>
        <retrofit-version>2.5.0</retrofit-version>
--- a/samples/client/petstore/java/retrofit2-play26/build.gradle
+++ b/samples/client/petstore/java/retrofit2-play26/build.gradle
@@ -98,7 +98,7 @@ ext {
    oltu_version = "1.0.1"
    retrofit_version = "2.3.0"
    jackson_version = "2.8.11"
-    jackson_databind_version = "2.8.11"
+    jackson_databind_version = "2.8.11.3"
    play_version = "2.6.7"
    swagger_annotations_version = "1.5.21"
    junit_version = "4.12"
@@ -121,6 +121,7 @@ dependencies {
    compile "com.squareup.retrofit2:converter-jackson:$retrofit_version"
    compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
    compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
    compile "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:$jackson_version"

    testCompile "junit:junit:$junit_version"
--- a/samples/client/petstore/java/retrofit2-play26/build.sbt
+++ b/samples/client/petstore/java/retrofit2-play26/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
      "javax.validation" % "validation-api" % "1.1.0.Final" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.8.11" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.8.11" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.2" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.3" % "compile",
      "com.squareup.retrofit2" % "converter-jackson" % "2.3.0" % "compile",
      "io.swagger" % "swagger-annotations" % "1.5.21" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/samples/client/petstore/java/retrofit2-play26/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play26/pom.xml
@@ -246,7 +246,7 @@
            <dependency>
                <groupId>com.fasterxml.jackson.core</groupId>
                <artifactId>jackson-databind</artifactId>
-                <version>${jackson-version}</version>
+                <version>${jackson-databind-version}</version>
            </dependency>
            <dependency>
                <groupId>com.fasterxml.jackson.datatype</groupId>
@@ -278,6 +278,7 @@
        <maven.compiler.target>${java.version}</maven.compiler.target>
        <gson-fire-version>1.8.0</gson-fire-version>
        <swagger-annotations-version>1.5.21</swagger-annotations-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <jackson-version>2.8.11</jackson-version>
        <play-version>2.6.7</play-version>
        <retrofit-version>2.5.0</retrofit-version>
--- a/samples/client/petstore/java/webclient/pom.xml
+++ b/samples/client/petstore/java/webclient/pom.xml
@@ -111,7 +111,7 @@
        <swagger-annotations-version>1.5.20</swagger-annotations-version>
        <spring-web-version>5.0.7.RELEASE</spring-web-version>
        <jackson-version>2.8.11</jackson-version>
-        <jackson-databind-version>2.8.11.2</jackson-databind-version>
+        <jackson-databind-version>2.8.11.3</jackson-databind-version>
        <junit-version>4.12</junit-version>
        <reactor-version>3.1.8.RELEASE</reactor-version>
        <reactor-netty-version>0.7.8.RELEASE</reactor-netty-version>