2.0.6 release preps, update plugins, owasp

apache · Jul 1, 2021 · e74e453d5e33805ab7aabb1aeb6ca624058a98a5 · e74e453
1 parent 765a06b
commit e74e453d5e33805ab7aabb1aeb6ca624058a98a5
Showing 2 changed files with 7 additions and 14 deletions.
diff --git a/pom.xml b/pom.xml
@@ -111,7 +111,7 @@
     <junit.version>4.13.2</junit.version>
     <version.log4j>2.14.1</version.log4j>
     <servlet-api.version>2.5.0</servlet-api.version>
-    <jackson-jaxrs.version>2.10.1</jackson-jaxrs.version>
+    <jackson-jaxrs.version>2.12.3</jackson-jaxrs.version>
     <version.jaxb.core>2.3.0.1</version.jaxb.core>
     <version.jaxb.impl>2.3.2</version.jaxb.impl>
     <!--  Other properties -->
@@ -302,7 +302,7 @@
         <configuration>
           <source>8</source>
           <stylesheet>java</stylesheet>
-          <bottom>&lt;small&gt;Copyright &amp;copy; 2003-2016, The Apache Software Foundation. All Rights Reserved. Generated ${maven.build.timestamp}&lt;/small&gt;</bottom>
+          <bottom>&lt;small&gt;Copyright &amp;copy; 2003-2021, The Apache Software Foundation. All Rights Reserved. Generated ${maven.build.timestamp}&lt;/small&gt;</bottom>
           <overview>src/main/java/org/apache/directory/fortress/rest/overview.html</overview>
           <version>true</version>
           <author>true</author>
@@ -315,7 +315,7 @@
       <plugin>
         <groupId>org.owasp</groupId>
         <artifactId>dependency-check-maven</artifactId>
-        <version>5.2.4</version>
+        <version>6.2.2</version>
         <configuration>
           <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
           <suppressionFile>${project.basedir}/src/owasp/suppression.xml</suppressionFile>

diff --git a/src/owasp/suppression.xml b/src/owasp/suppression.xml
@@ -22,16 +22,9 @@
     <!-- Suppress OWASP warnings about spring security, security method override, not applicable here. -->
     <suppress>
         <notes><![CDATA[
-   file name: spring-security-core-5.2.1.RELEASE.jar
+   file name: api-i18n-2.0.0.jar
    ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-core@.*$</packageUrl>
-        <cve>CVE-2018-1258</cve>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.directory\.api/api\-i18n@.*$</packageUrl>
+        <cpe>cpe:/a:i18n_project:i18n</cpe>
     </suppress>
-    <suppress>
-        <notes><![CDATA[
-   file name: spring-security-web-5.2.1.RELEASE.jar
-   ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-web@.*$</packageUrl>
-        <cpe>cpe:/a:pivotal_software:spring_security</cpe>
-    </suppress>
-</suppressions>
+</suppressions>