Merge pull request #966 from RADAR-base/security/jackson-undertow

[Security] Upgrade Jackson and Undertow

build.gradle

@@ -142,6 +142,8 @@ if (project.hasProperty('graphite')) {
 
 //ext.moduleDescription = 'Management Portal application'
 ext.findbugAnnotationVersion = '3.0.2'
+// Needed to force the import by Spring Dependency Management Plugin
+ext['jackson.version'] = "${jackson_version}"
 
 dependencies {
     implementation("tech.jhipster:jhipster-framework:${jhipster_server_version}")

gradle.properties

@@ -27,11 +27,11 @@ springfox_version=2.6.1
 spring_boot_version=2.7.15
 gatling_version=3.10.0
 mapstruct_version=1.4.2.Final
-undertow_version=2.2.32.Final
+undertow_version=2.2.34.Final
 yarn_version=1.22.15
 spring_data_envers_version=2.5.6
-jackson_version=2.13.4
-jackson_dataformat_version=2.13.4
+jackson_version=2.15.0
+jackson_dataformat_version=2.15.0
 javax_xml_bind_version=2.3.3
 javax_jaxb_core_version=2.3.0.1
 javax_jaxb_runtime_version=2.3.4

managementportal-client/build.gradle

@@ -24,7 +24,7 @@ repositories {
 }
 
 ext {
-    jacksonModuleVersion = "2.13.4"
+    jacksonModuleVersion = "2.15.0"
     okhttpVersion = "4.9.1"
     junitVersion = "5.7.2"
 }

oauth-client-util/build.gradle

@@ -1,5 +1,5 @@
-ext.jacksonVersion = '2.13.4'
-ext.jacksonYamlVersion = '2.13.4'
+ext.jacksonVersion = '2.15.0'
+ext.jacksonYamlVersion = '2.15.0'
 ext.okhttpVersion = '4.9.1'
 ext.junitVersion ='5.7.2'
 

package.json

@@ -25,7 +25,7 @@
     "ng-qrcode": "^5.2.0",
     "ngx-cookie-service": "^12.0.3",
     "ngx-webstorage": "^8.0.0",
-    "puppeteer": "^22.4.1",
+    "puppeteer": "^22.11.2",
     "rxjs": "~6.6.0",
     "tslib": "^2.3.0",
     "zone.js": "~0.11.4"

radar-auth/build.gradle

@@ -5,8 +5,8 @@ plugins {
 apply plugin: 'maven-publish'
 
 ext {
-    jacksonVersion = '2.13.4'
-    jacksonYamlVersion = '2.13.4'
+    jacksonVersion = '2.15.0'
+    jacksonYamlVersion = '2.15.0'
     okhttpVersion = '4.9.1'
     oauthJwtVersion = '3.19.1'
     commonsCodecVersion = '1.15'