ISSUE-627: Remediate Security Vulnerabilites. (#628)

* Apache Common BeanUtils upgraded to v1.9.4. * Jackson upgraded to v2.10.1. * Logback upgraded to v1.2.3.
hortonworks · Nov 22, 2019 · 4a2f66e · 4a2f66e
1 parent 67b30db
commit 4a2f66e
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/examples/schema-registry/avro/pom.xml b/examples/schema-registry/avro/pom.xml
@@ -55,7 +55,7 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.1.7</version>
+            <version>${logback.version}</version>
         </dependency>
 
         <dependency>

diff --git a/pom.xml b/pom.xml
@@ -375,7 +375,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <junit.version>4.12</junit.version>
-        <jackson.version>2.9.8</jackson.version>
+        <jackson.version>2.10.1</jackson.version>
         <commons-cli.version>1.3.1</commons-cli.version>
         <commons.version>2.5</commons.version>
         <slf4j.version>1.7.25</slf4j.version>
@@ -394,12 +394,13 @@
         <hbase.version>1.1.2.2.5.0.0-1245</hbase.version>
         <jsonschemavalidator.version>2.2.6</jsonschemavalidator.version>
         <kryo.version>2.21</kryo.version>
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.3</logback.version>
         <phoenix.version>4.4.0-HBase-1.1</phoenix.version>
         <mariadb-java-client.version>1.5.5</mariadb-java-client.version>
         <calcite.version>1.4.0-incubating</calcite.version>
         <commons-lang3.version>3.4</commons-lang3.version>
         <commons-lang.version>2.6</commons-lang.version>
+        <commons-beanutils.version>1.9.4</commons-beanutils.version>
         <maven-jar-plugin.version>2.6</maven-jar-plugin.version>
         <maven-surefire.version>2.18.1</maven-surefire.version>
         <maven-shade-plugin.version>2.4.1</maven-shade-plugin.version>
@@ -575,6 +576,11 @@
                     </exclusion>
                 </exclusions>
             </dependency>
+            <dependency>
+                <groupId>commons-beanutils</groupId>
+                <artifactId>commons-beanutils</artifactId>
+                <version>${commons-beanutils.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.apache.kafka</groupId>
                 <artifactId>${kafkaArtifact}</artifactId>