[pulsar] branch branch-2.11 updated: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149 (#18022)

[nicoloboschi]

This is an automated email from the ASF dual-hosted git repository.

nicoloboschi pushed a commit to branch branch-2.11
in repository https://gitbox.apache.org/repos/asf/pulsar.git


The following commit(s) were added to refs/heads/branch-2.11 by this push:
     new c46d5ddc3ae [fix][sec] File tiered storage: upgrade jettison to get 
rid of CVE-2022-40149 (#18022)
c46d5ddc3ae is described below

commit c46d5ddc3aeee70f5800c426dd85270ed07b1af9
Author: Nicolò Boschi <boschi1...@gmail.com>
AuthorDate: Mon Oct 17 23:09:50 2022 +0200

    [fix][sec] File tiered storage: upgrade jettison to get rid of 
CVE-2022-40149 (#18022)
    
    * [fix][sec] File tiered storage: upgrade jettison to get rid of 
CVE-2022-40149
    
    * fix
    
    (cherry picked from commit 9acafc9b9084cbb127ce5669236bdd5dd8e85a0f)
---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index 6f4f509b51d..68a087ca55c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -246,6 +246,7 @@ flexible messaging model and an intuitive client 
API.</description>
     <objenesis.version>3.1</objenesis.version>
     <awaitility.version>4.2.0</awaitility.version>
     <reload4j.version>1.2.22</reload4j.version>
+    <jettison.version>1.5.1</jettison.version>
 
     <!-- Plugin dependencies -->
     <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
@@ -803,6 +804,13 @@ flexible messaging model and an intuitive client 
API.</description>
         <scope>import</scope>
       </dependency>
 
+      <dependency>
+        <groupId>org.codehaus.jettison</groupId>
+        <artifactId>jettison</artifactId>
+        <version>${jettison.version}</version>
+      </dependency>
+
+
       <dependency>
         <groupId>org.hdrhistogram</groupId>
         <artifactId>HdrHistogram</artifactId>