commit 86ee5e8711b1dcb97f07fa79dcc5d5ba13d125c1
author Ray Milkey <ray@opennetworking.org> Mon Apr 02 15:33:07 2018 -0700
committer Thomas Vachuska <tom@opennetworking.org> Tue Apr 03 16:49:03 2018 +0000
tree 78a91af423c74c834841c1aa13190cb2e11144e5
parent fca3c6abb5fb28ba58bac47e1c876b4ab8124d77

Upgrade fasterXML libraries for OS-9

Upgrade fasterXML to version 2.9.5 to address security vulnerability
Wrap calls to treeRead(InputStream) to handle new behavior of null streams

Change-Id: Id199cfacd0cf9e5371dc33de9f1e058c2e72eaa5

lib/deps.json

diff --git a/lib/deps.json b/lib/deps.json
index 8d5783e..692ffa6 100644
--- a/lib/deps.json
+++ b/lib/deps.json
@@ -151,9 +151,9 @@
     "logging-interceptor": "mvn:com.squareup.okhttp3:logging-interceptor:3.9.1",
     "moshi": "mvn:com.squareup.moshi:moshi:1.4.0",
     "okio": "mvn:com.squareup.okio:okio:1.11.0",
-    "jackson-annotations": "mvn:com.fasterxml.jackson.core:jackson-annotations:2.8.10",
-    "jackson-core": "mvn:com.fasterxml.jackson.core:jackson-core:2.8.10",
-    "jackson-databind": "mvn:com.fasterxml.jackson.core:jackson-databind:2.8.10",
+    "jackson-annotations": "mvn:com.fasterxml.jackson.core:jackson-annotations:2.9.5",
+    "jackson-core": "mvn:com.fasterxml.jackson.core:jackson-core:2.9.5",
+    "jackson-databind": "mvn:com.fasterxml.jackson.core:jackson-databind:2.9.5",
     "javax.annotation-api": "mvn:javax.annotation:javax.annotation-api:1.2",
     "javax.inject": "mvn:org.glassfish.hk2.external:javax.inject:2.5.0-b42",
     "javax.ws.rs-api": "mvn:javax.ws.rs:javax.ws.rs-api:2.1",