Update jackson-databind

Update one dependency to fix the security issues reported by NExus IQ

Issue-ID: CLAMP-135
Change-Id: I0cc1c3a32047083790dd556f5be1ef43cb8afffb
Signed-off-by: Determe, Sebastien (sd378r) <sd378r@intl.att.com>

diff --git a/pom.xml b/pom.xml
index 69755e4..22c6fe3 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -33,7 +33,7 @@
                <parent>
                                <groupId>org.onap.oparent</groupId>
                                <artifactId>oparent</artifactId>
-                               <version>1.1.0-SNAPSHOT</version>
+                               <version>1.1.0</version>
                </parent>
 
                <description>
@@ -274,10 +274,6 @@
                                                <groupId>com.fasterxml.jackson.core</groupId>
                                                <artifactId>jackson-core</artifactId>
                                </dependency>
-                               <dependency>
-                                               <groupId>com.fasterxml.jackson.core</groupId>
-                                               <artifactId>jackson-databind</artifactId>
-                               </dependency>
                                <dependency>
                                                <groupId>javax.transaction</groupId>
                                                <artifactId>jta</artifactId>
@@ -436,10 +432,6 @@
                                                                </exclusion>
                                                </exclusions>
                                </dependency>
-                               <dependency>
-                                               <groupId>com.fasterxml.jackson.core</groupId>
-                                               <artifactId>jackson-databind</artifactId>
-                               </dependency>
                                <dependency>
                                                <groupId>com.fasterxml.jackson.dataformat</groupId>
                                                <artifactId>jackson-dataformat-yaml</artifactId>
@@ -475,6 +467,11 @@
                                        <artifactId>jboss-jaxrs-api_2.0_spec</artifactId>
                                        <version>1.0.1.Final</version>
                                </dependency>
+                               <dependency>
+                                               <groupId>com.fasterxml.jackson.core</groupId>
+                                               <artifactId>jackson-databind</artifactId>
+                                               <version>2.8.11.1</version>
+                               </dependency>
                                <!-- Remove the MYSQL connector and replace it by Mariadb -->
                                <dependency>
                                                <groupId>org.mariadb.jdbc</groupId>