From ae81d8df93eb2e19e83482b300614cfd0059bd85 Mon Sep 17 00:00:00 2001 From: iosmanthus Date: Thu, 7 Apr 2022 18:11:24 +0800 Subject: [PATCH 1/2] cherry pick #584 to release-3.1 Signed-off-by: ti-srebot --- pom.xml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 98cb54a6421..8492e1fbacf 100644 --- a/pom.xml +++ b/pom.xml @@ -65,8 +65,13 @@ 1.38.0 2.8.9 1.6.6 +<<<<<<< HEAD 2.10.5 2.10.5.1 +======= + 2.13.2 + 2.13.2.2 +>>>>>>> 7fa24c320... [close #567] upgrade jackson-databind to 2.13.2.2 to fix CVE-2020-36518 (#584) 3.0.1 0.4.1 2.9.9 @@ -179,7 +184,7 @@ com.fasterxml.jackson.core jackson-annotations - ${jackson.version} + ${jackson-annotations.version} com.fasterxml.jackson.core From f7b2c9cbfa829308639ab021d097e0ae8ae0b19d Mon Sep 17 00:00:00 2001 From: iosmanthus Date: Thu, 7 Apr 2022 18:32:47 +0800 Subject: [PATCH 2/2] fix conflict for jackson-databind version Signed-off-by: iosmanthus --- pom.xml | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index 8492e1fbacf..b289674efb9 100644 --- a/pom.xml +++ b/pom.xml @@ -65,13 +65,8 @@ 1.38.0 2.8.9 1.6.6 -<<<<<<< HEAD - 2.10.5 - 2.10.5.1 -======= 2.13.2 2.13.2.2 ->>>>>>> 7fa24c320... [close #567] upgrade jackson-databind to 2.13.2.2 to fix CVE-2020-36518 (#584) 3.0.1 0.4.1 2.9.9 @@ -189,7 +184,7 @@ com.fasterxml.jackson.core jackson-databind - ${jackson.databind.version} + ${jackson.version} io.etcd