Merge pull request #19 from GovTechSG/development

Fixed CVE-2019-14439 , CVE-2019-14479

Author: robincher

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Change Log
 
+### V1.3.4-SNAPSHOT
+
+- Fixed vulnerablity CVE-2019-14379 and CVE-2019-14439
+
 ### V1.3.3-SNAPSHOT
 
 - Set TravisCI build dist to Trusty

build.gradle

@@ -4,7 +4,7 @@ plugins {
     id 'com.github.kt3k.coveralls' version '2.6.3'
 }
 
-version '1.3.3-SNAPSHOT'
+version '1.3.4-SNAPSHOT'
 
 tasks.withType(JavaCompile) {
     options.encoding = "UTF-8"
@@ -18,7 +18,7 @@ dependencies {
     //compile group: 'org.apache.commons', name: 'commons-collections4', version: '4.1'
     compile group: 'commons-lang', name: 'commons-lang', version: '2.4'
     compile group: 'org.slf4j', name: 'slf4j-api', version: '1.7.25'
-    compile group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.9.9.1'
+    compile group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.9.9.2'
     compile group: 'com.googlecode.json-simple', name: 'json-simple', version: '1.1.1'
     compile group: 'org.bouncycastle', name: 'bcpkix-jdk15on', version: '1.60'
     testCompile group: 'org.slf4j', name: 'slf4j-log4j12', version: '1.7.25'

pom.xml

@@ -2,7 +2,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>com.api.util</groupId>
   <artifactId>ApiSecurity</artifactId>
-  <version>1.3.3-SNAPSHOT</version>
+  <version>1.3.4-SNAPSHOT</version>
   <build>
     <plugins>
       <plugin>
@@ -90,7 +90,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.9.9.1</version>
+            <version>2.9.9.2</version>
         </dependency>
         <dependency>
 		    <groupId>com.googlecode.json-simple</groupId>