Merge pull request #39 from aktin/vulnerable-dependencies-updates

Vulnerable dependencies updates
aktin · Apr 24, 2024 · 460277d · 460277d
2 parents f9825b6 + 30fcf05
commit 460277d
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 15 deletions.
diff --git a/broker-admin/pom.xml b/broker-admin/pom.xml
@@ -15,7 +15,8 @@
 		<version>1.5.2-SNAPSHOT</version>
 	</parent>
 	<properties>
-		<jetty.version>9.4.51.v20230217</jetty.version>
+		<jetty.version>9.4.53.v20231009</jetty.version>
+		<jersey.version>2.41</jersey.version>
 	</properties>
 
 
@@ -153,27 +154,27 @@
 		<dependency>
 			<groupId>org.glassfish.jersey.core</groupId>
 			<artifactId>jersey-server</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.containers</groupId>
 			<artifactId>jersey-container-servlet-core</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.containers</groupId>
 			<artifactId>jersey-container-jetty-http</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.ext.cdi</groupId>
 			<artifactId>jersey-cdi1x-servlet</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.inject</groupId>
 			<artifactId>jersey-hk2</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 		</dependency>
 		<!-- don't need JSON support on server
 		<dependency>
@@ -184,7 +185,14 @@
 		-->
 		<!-- SLF4j Logging into JUL/JDK framework -->
 		<!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-jdk14 -->
-
+
+		<!-- Starting from Jersey 2.30 onwards, JAXB support was moved to a separate module  -->
+		<dependency>
+			<groupId>org.glassfish.jersey.media</groupId>
+			<artifactId>jersey-media-jaxb</artifactId>
+			<version>${jersey.version}</version>
+		</dependency>
+
 		<dependency>
 			<groupId>org.slf4j</groupId>
 			<artifactId>slf4j-jdk14</artifactId>

diff --git a/broker-auth-openid/pom.xml b/broker-auth-openid/pom.xml
@@ -79,7 +79,7 @@
 		<dependency>
 			<groupId>org.bitbucket.b_c</groupId>
 			<artifactId>jose4j</artifactId>
-			<version>0.9.3</version>
+			<version>0.9.6</version>
 		</dependency>
 		<dependency>
 			<artifactId>lombok</artifactId>

diff --git a/broker-server/pom.xml b/broker-server/pom.xml
@@ -17,7 +17,8 @@
 	</parent>
 	<properties>
 		<java.util.logging.config.file>src/test/resources/logging.properties</java.util.logging.config.file>
-		<jetty.version>9.4.51.v20230217</jetty.version>
+		<jetty.version>9.4.53.v20231009</jetty.version>
+		<jersey.version>2.41</jersey.version>
 	</properties>
 	<build>
 	 	<plugins>
@@ -93,7 +94,7 @@
 		<dependency>
 			<groupId>org.liquibase</groupId>
 			<artifactId>liquibase-core</artifactId>
-			<version>4.19.1</version>
+			<version>4.25.1</version>
 			<exclusions>
 			    <exclusion>
 				<groupId>ch.qos.logback</groupId>
@@ -147,31 +148,39 @@
 		<dependency>
 			<groupId>org.glassfish.jersey.core</groupId>
 			<artifactId>jersey-server</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.containers</groupId>
 			<artifactId>jersey-container-servlet-core</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.containers</groupId>
 			<artifactId>jersey-container-jetty-http</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.inject</groupId>
 			<artifactId>jersey-hk2</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
 			<groupId>org.glassfish.jersey.ext.cdi</groupId>
 			<artifactId>jersey-cdi1x-servlet</artifactId>
-			<version>2.30.1</version>
+			<version>${jersey.version}</version>
+			<scope>test</scope>
+		</dependency>
+
+		<!-- Starting from Jersey 2.30 onwards, JAXB support was moved to a separate module  -->
+		<dependency>
+			<groupId>org.glassfish.jersey.media</groupId>
+			<artifactId>jersey-media-jaxb</artifactId>
+			<version>${jersey.version}</version>
 			<scope>test</scope>
 		</dependency>