- update jaxb to allow java 9+ to suppress illegal reflection access
- update junit to 4.13.1
- use quartz v.2.3.2 due to CVE-2019-13990
- update yaafi-crypto/pom.xml to use testcontainer snapshot dependency
git-svn-id: https://svn.apache.org/repos/asf/turbine/fulcrum/trunk/quartz@1882459 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/pom.xml b/pom.xml
index c55be26..4301191 100644
--- a/pom.xml
+++ b/pom.xml
@@ -87,11 +87,11 @@
<artifactId>avalon-framework-api</artifactId>
<version>4.3.1</version>
</dependency>
- <!-- 2.3.1 fixes https://github.com/quartz-scheduler/quartz/issues/316 -->
+ <!-- 2.3.1 fixes https://github.com/quartz-scheduler/quartz/issues/316 , resolve CVE-2019-13990-->
<dependency>
<groupId>org.quartz-scheduler</groupId>
<artifactId>quartz</artifactId>
- <version>2.3.1</version>
+ <version>2.3.2</version>
</dependency>
<dependency>
<groupId>org.quartz-scheduler</groupId>
