From 8819e05cdf62c5995d7acbe72e7c2d3d9a1187cb Mon Sep 17 00:00:00 2001 From: andreacastello Date: Thu, 3 Mar 2022 09:46:58 +0100 Subject: [PATCH 1/2] CCLJ-50: updated logback dependency to resolve vulnerability --- CHANGELOG.txt | 3 +++ code/pom.xml | 6 +++--- examples/pom.xml | 2 +- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.txt b/CHANGELOG.txt index bd45e60..311b5e0 100644 --- a/CHANGELOG.txt +++ b/CHANGELOG.txt @@ -1,3 +1,6 @@ +1.11.1 +Updated vulnerable dependency + 1.11.0 Fix and ehn: replaced jsoniter with Gson due to some jsoniter deserialization issue and an unfixed severe security alert (CVE-2021-23441). diff --git a/code/pom.xml b/code/pom.xml index 274f934..daf6903 100644 --- a/code/pom.xml +++ b/code/pom.xml @@ -4,7 +4,7 @@ 4.0.0 com.scientiamobile.wurflcloud client-java - 1.11.0 + 1.11.1 jar wurfl-cloud-client @@ -59,7 +59,7 @@ UTF-8 UTF-8 6.9.8 - 1.2.0 + 1.2.10 1.6.4 2.10.2 1.7 @@ -86,7 +86,7 @@ com.google.code.gson gson - 2.8.8 + 2.8.9 diff --git a/examples/pom.xml b/examples/pom.xml index caf2598..368c678 100755 --- a/examples/pom.xml +++ b/examples/pom.xml @@ -5,7 +5,7 @@ com.scientiamobile.wurflcloud client-example - 1.11.0 + 1.11.1 war WURFL Cloud Client example webapp From eb3124fbe54baa0f60ee4c33503d250fad8dae0f Mon Sep 17 00:00:00 2001 From: andreacastello Date: Thu, 3 Mar 2022 09:58:11 +0100 Subject: [PATCH 2/2] updated version value --- .../java/com/scientiamobile/wurflcloud/utils/Constants.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/src/main/java/com/scientiamobile/wurflcloud/utils/Constants.java b/code/src/main/java/com/scientiamobile/wurflcloud/utils/Constants.java index 6548c99..32da9af 100755 --- a/code/src/main/java/com/scientiamobile/wurflcloud/utils/Constants.java +++ b/code/src/main/java/com/scientiamobile/wurflcloud/utils/Constants.java @@ -24,7 +24,7 @@ public interface Constants { /** * The version of this client */ - String CLIENT_VERSION = "1.11.0"; + String CLIENT_VERSION = "1.11.1"; /** * Accepted encoding enum.