Resolve jackson-databind security vulnerabilities

Change-Id: Idaa55084f5ecb0dd3536c232cebc14fb50000010
Issue-ID: SO-1047
Signed-off-by: Siva.ye <yezhihua@huawei.com>
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

diff --git a/pom.xml b/pom.xml
index aa2b9bf..661b66a 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -153,34 +153,10 @@
                </dependencies>
        </dependencyManagement>
        <dependencies>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-core</artifactId>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.module</groupId>
-                       <artifactId>jackson-module-jaxb-annotations</artifactId>
-                       <version>2.4.0</version>
-               </dependency>
                <dependency>
                        <groupId>com.fasterxml.jackson.core</groupId>
                        <artifactId>jackson-databind</artifactId>
-                       <version>2.8.10</version>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-annotations</artifactId>
-                       <version>2.8.10</version>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.jaxrs</groupId>
-                       <artifactId>jackson-jaxrs-base</artifactId>
-                       <version>2.9.2</version>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.jaxrs</groupId>
-                       <artifactId>jackson-jaxrs-json-provider</artifactId>
-                       <version>2.9.2</version>
+                       <version>2.9.6</version>
                </dependency>
        </dependencies>
        <reporting>