diff --git a/README.md b/README.md index 8489b07c..428e232d 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,15 @@ [![Build Status](https://travis-ci.org/jenkinsci/java-client-api.svg?branch=master)](https://travis-ci.org/jenkinsci/java-client-api) [![Javadocs](https://javadoc.io/badge/com.offbytwo.jenkins/jenkins-client.svg?color=blue)](https://javadoc.io/doc/com.offbytwo.jenkins/jenkins-client) +## Fork + +The original library (version 0.3.8) uses the dependencies: +* commons-beanutils-1.8.0.jar - reported Vulnerabilities: CVE-2014-0114 +* commons-collections-3.2.1.jar - reported Vulnerabilities: CVE-2015-6420, CVE-2015-4852, CVE-2015-7501 +* jackson-databind-2.3.4.jar - reported Vulnerabilities: CVE-2018-19360, CVE-2018-19361, CVE-2018-19362, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2017-17485, CVE-2017-7525 + +I am forking this library to update dependencies to resolve security issues + ## Important Note The Jenkins API Client For Java has now moved under the umbrella of the Jenkins GitHub Organization. diff --git a/jenkins-client/pom.xml b/jenkins-client/pom.xml index 75eb3fc9..77869e36 100644 --- a/jenkins-client/pom.xml +++ b/jenkins-client/pom.xml @@ -11,7 +11,7 @@ com.offbytwo.jenkins jenkins-client-parent - 0.3.9-SNAPSHOT + 0.3.9999-SNAPSHOT jenkins-client @@ -48,7 +48,27 @@ net.sf.json-lib json-lib jdk15 - + + + commons-beanutils + commons-beanutils + + + + commons-collections + commons-collections + + + + + + commons-beanutils + commons-beanutils + + + commons-collections + commons-collections + @@ -173,6 +193,29 @@ + + + org.apache.maven.plugins + maven-dependency-plugin + 3.1.1 + + + copy-dependencies + initialize + + copy-dependencies + + + dependencies-repository + true + ture + true + true + true + runtime + + + diff --git a/pom.xml b/pom.xml index cea2c716..c0bcdac9 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ com.offbytwo.jenkins jenkins-client-parent - 0.3.9-SNAPSHOT + 0.3.9999-SNAPSHOT pom @@ -60,10 +60,12 @@ 3.8.1 17.0 2.4 + 1.9.3 + 3.2.2 4.3.6 4.3.3 4.3.6 - 2.9.6 + 2.9.8 @@ -123,7 +125,29 @@ json-lib ${json-lib.version} jdk15 + + + commons-beanutils + commons-beanutils + + + + commons-collections + commons-collections + + + + + commons-beanutils + commons-beanutils + ${commons-beanutils.version} + + + commons-collections + commons-collections + ${commons-collections.version} + @@ -498,8 +522,7 @@ - jenkins-client - jenkins-client-it-docker + jenkins-client