commit 8e3e681da6265f3289267d48435373b8ea12b812
author PJ Fanning <pjfanning@users.noreply.github.com> Wed Apr 20 23:48:29 2022 +0200
committer GitHub <noreply@github.com> Wed Apr 20 14:48:29 2022 -0700
tree 7da443c53a897602d7cdfca9b2b183cfed2c555d
parent 0b277b0335a12029aa14e74f70ab447903db3bf2

upgrade xstream to security issues (#2046)

helix-admin-webapp/pom.xml

diff --git a/helix-admin-webapp/pom.xml b/helix-admin-webapp/pom.xml
index c0fab55..3fe9c95 100644
--- a/helix-admin-webapp/pom.xml
+++ b/helix-admin-webapp/pom.xml
@@ -77,7 +77,7 @@
     <dependency>
       <groupId>com.thoughtworks.xstream</groupId>
       <artifactId>xstream</artifactId>
-      <version>1.3.1</version>
+      <version>1.4.19</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>

helix-core/src/main/scripts/integration-test/script/driver_cmd_dict.py

diff --git a/helix-core/src/main/scripts/integration-test/script/driver_cmd_dict.py b/helix-core/src/main/scripts/integration-test/script/driver_cmd_dict.py
index 1297a89..7c6ed0f 100644
--- a/helix-core/src/main/scripts/integration-test/script/driver_cmd_dict.py
+++ b/helix-core/src/main/scripts/integration-test/script/driver_cmd_dict.py
@@ -137,7 +137,7 @@
    {
     "class_path":[
       "IVY_DIR/com/github/sgroschupf/zkclient/0.1/zkclient-0.1.jar"
-      ,"IVY_DIR/com/thoughtworks/xstream/xstream/1.3.1/xstream-1.3.1.jar"
+      ,"IVY_DIR/com/thoughtworks/xstream/xstream/1.4.19/xstream-1.4.19.jar"
       ,"IVY_DIR/commons-cli/commons-cli/1.2/commons-cli-1.2.jar"
       ,"IVY_DIR/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
       ,"IVY_DIR/commons-lang/commons-lang/2.4/commons-lang-2.4.jar"
@@ -157,7 +157,7 @@
   ,"dummy-process":
    {
     "class_path":[
-      "IVY_DIR/com/thoughtworks/xstream/xstream/1.3.1/xstream-1.3.1.jar"
+      "IVY_DIR/com/thoughtworks/xstream/xstream/1.4.19/xstream-1.4.19.jar"
       ,"IVY_DIR/commons-cli/commons-cli/1.2/commons-cli-1.2.jar"
       ,"IVY_DIR/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
       ,"IVY_DIR/commons-lang/commons-lang/2.4/commons-lang-2.4.jar"
@@ -178,7 +178,7 @@
   ,"mock-health-report-process":
    {
     "class_path":[
-      "IVY_DIR/com/thoughtworks/xstream/xstream/1.3.1/xstream-1.3.1.jar"
+      "IVY_DIR/com/thoughtworks/xstream/xstream/1.4.19/xstream-1.4.19.jar"
       ,"IVY_DIR/commons-cli/commons-cli/1.2/commons-cli-1.2.jar"
       ,"IVY_DIR/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
       ,"IVY_DIR/commons-lang/commons-lang/2.11.0/commons-lang-2.11.0.jar"
@@ -201,7 +201,7 @@
   ,"cluster-manager":
    {
     "class_path":[
-      "IVY_DIR/com/thoughtworks/xstream/xstream/1.3.1/xstream-1.3.1.jar"
+      "IVY_DIR/com/thoughtworks/xstream/xstream/1.4.19/xstream-1.4.19.jar"
       ,"IVY_DIR/commons-cli/commons-cli/1.2/commons-cli-1.2.jar"
       ,"IVY_DIR/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
       ,"IVY_DIR/commons-lang/commons-lang/2.4/commons-lang-2.4.jar"
@@ -224,7 +224,7 @@
    {
     "class_path":[
       "IVY_DIR/com/github/sgroschupf/zkclient/0.1/zkclient-0.1.jar"
-      ,"IVY_DIR/com/thoughtworks/xstream/xstream/1.3.1/xstream-1.3.1.jar"
+      ,"IVY_DIR/com/thoughtworks/xstream/xstream/1.4.19/xstream-1.4.19.jar"
       ,"IVY_DIR/commons-cli/commons-cli/1.2/commons-cli-1.2.jar"
       ,"IVY_DIR/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
       ,"IVY_DIR/commons-lang/commons-lang/2.4/commons-lang-2.4.jar"

helix-rest/pom.xml

diff --git a/helix-rest/pom.xml b/helix-rest/pom.xml
index 10ae288..2847c44 100644
--- a/helix-rest/pom.xml
+++ b/helix-rest/pom.xml
@@ -117,7 +117,7 @@
     <dependency>
       <groupId>com.thoughtworks.xstream</groupId>
       <artifactId>xstream</artifactId>
-      <version>1.3.1</version>
+      <version>1.4.19</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>