0004306: Upgrade libraries with known vulnerabilities

JumpMind · Mar 17, 2020 · f6f6d4f · f6f6d4f
1 parent 064962a
commit f6f6d4f
Show file tree

Hide file tree

Showing 7 changed files with 236 additions and 228 deletions.
diff --git a/symmetric-assemble/build.gradle b/symmetric-assemble/build.gradle
@@ -8,7 +8,7 @@ buildscript {
         classpath 'org.asciidoctor:asciidoctor-gradle-plugin:1.5.3'
         classpath 'org.asciidoctor:asciidoctorj-pdf:1.5.0-alpha.16'
         classpath 'org.springframework.build.gradle:propdeps-plugin:0.0.7'
-        classpath 'io.spring.gradle:docbook-reference-plugin:0.3.0'
+        classpath 'io.spring.gradle:docbook-reference-plugin:0.3.1'
         classpath ("com.smokejumperit.gradle.license:Gradle-License-Report:0.0.2") {
             // guava 21 requires Java 8, setting up for a clean build with only Java 1.7 tools.
             exclude group: 'com.google.guava', module: 'guava'

diff --git a/symmetric-assemble/common.gradle b/symmetric-assemble/common.gradle
@@ -164,14 +164,14 @@ subprojects { subproject ->
 
     ext {
         bshVersion = '2.0b6'
-        commonsBeanUtilsVersion = '1.9.3'
-        commonsCliVersion = '1.2'
+        commonsBeanUtilsVersion = '1.9.4'
+        commonsCliVersion = '1.4'
         commonsDbcpVersion = '1.4'
-        commonsFileuploadVersion = '1.3.3'
-        commonsIoVersion = '2.4'
+        commonsFileuploadVersion = '1.4'
+        commonsIoVersion = '2.6'
         commonsLangVersion = '2.6'
-        commonsNetVersion = '3.3'
-        commonsCodecVersion = '1.3'
+        commonsNetVersion = '3.6'
+        commonsCodecVersion = '1.12'
         commonsCollectionVersion = '3.2.2'
         hamcrestVersion = '1.3'
         h2Version = '1.3.176'
@@ -186,15 +186,15 @@ subprojects { subproject ->
         jdomVersion = '2.0.5'
         junitVersion = '4.11'
         log4jVersion = '1.2.17'
-        slf4jVersion = '1.7.6'
+        slf4jVersion = '1.7.26'
         mockitoVersion = '1.9.5'
         powerMockVersion = '1.5.3'
         mysqlVersion = '5.1.45'
         servletVersion = '3.1.0'
         springVersion = '4.3.16.RELEASE'
-        jtdsVersion = '1.2.8'
+        jtdsVersion = '1.3.1'
         voltDbVersion = '6.2'
-        bouncyCastleVersion = '1.59'
+        bouncyCastleVersion = '1.64'
         animalSnifferVersion = '1.10'
         jnaVersion = '4.1.0'
         jettyVersion = project.property('jetty.version')

diff --git a/symmetric-assemble/gradle.properties b/symmetric-assemble/gradle.properties
@@ -11,5 +11,5 @@ publishPort=?
 publishServer=symmetricds.org
 sourceforgeUser=?
 sourceforgePassword=?
-jetty.version=9.4.19.v20190610
+jetty.version=9.4.26.v20200117
 vaadinVersion=8.1.6
diff --git a/symmetric-core/build.gradle b/symmetric-core/build.gradle
@@ -7,8 +7,8 @@ apply from: symAssembleDir + '/common.gradle'
         compile project(":symmetric-util")
         compile "commons-fileupload:commons-fileupload:$commonsFileuploadVersion"
         compile "javax.mail:mail:1.4.5"
-        compile "com.fasterxml.jackson.core:jackson-databind:2.9.5"
-        compile "com.google.code.gson:gson:2.8.2"
+        compile "com.fasterxml.jackson.core:jackson-databind:2.10.3"
+        compile "com.google.code.gson:gson:2.8.5"
         compile "org.springframework:spring-core:$springVersion"
 
         testCompile project(path: ':symmetric-util', configuration: 'testArtifacts')

diff --git a/symmetric-io/build.gradle b/symmetric-io/build.gradle
@@ -7,8 +7,9 @@ apply from: symAssembleDir + '/common.gradle'
         compile project(":symmetric-db")
         compile "org.apache-extras.beanshell:bsh:$bshVersion"
         compile "net.sourceforge.jeval:jeval:0.9.4"
-        provided "com.fasterxml.jackson.core:jackson-core:2.9.5"
-        provided "com.fasterxml.jackson.core:jackson-databind:2.9.5"
+        compile "com.google.code.gson:gson:2.8.5"
+        provided "com.fasterxml.jackson.core:jackson-core:2.10.3"
+        provided "com.fasterxml.jackson.core:jackson-databind:2.10.3"
 
         testCompile project(path: ':symmetric-util', configuration: 'testArtifacts')
         testCompile project(":symmetric-jdbc")