[GH-15748] Upgrade jackson-databind in Main Standalone Jar

h2oai · Sep 12, 2023 · 7ce4bd5 · 7ce4bd5
1 parent 458c011
commit 7ce4bd5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -48,8 +48,9 @@ dependencies {
     implementation 'org.apache.hive.shims:hive-shims-common:2.3.9'
 
     constraints {
-        api('com.fasterxml.jackson.core:jackson-databind:2.13.4.2') {
+        api('com.fasterxml.jackson.core:jackson-databind:2.15.2') {
             because 'Fixes CVE-2022-42003'
+            because 'Fixes PRISMA-2023-0067'
         }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -51,7 +51,7 @@ dependencies {
     api "com.google.oauth-client:google-oauth-client:1.33.3"
 
     constraints {
-        api('com.fasterxml.jackson.core:jackson-databind:2.15.1') {
+        api('com.fasterxml.jackson.core:jackson-databind:2.15.2') {
             because 'Fixes CVE-2022-42003'
             because 'Fixes PRISMA-2023-0067'
         }