Merge pull request Netflix#853 from twicksell/updateXstream

update XStream to 1.4.9 to patch XXE vulnerability
jingege · Sep 26, 2016 · c7d4238 · c7d4238
2 parents e41dac4 + 5454289
commit c7d4238
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/eureka-client/build.gradle b/eureka-client/build.gradle
@@ -3,7 +3,7 @@ apply plugin: 'provided-base'
 
 dependencies {
     compile "com.netflix.netflix-commons:netflix-eventbus:0.3.0"
-    compile 'com.thoughtworks.xstream:xstream:1.4.2'
+    compile 'com.thoughtworks.xstream:xstream:1.4.9'
     compile "com.netflix.archaius:archaius-core:${archaiusVersion}"
     compile 'javax.ws.rs:jsr311-api:1.1.1'
     compile "com.netflix.servo:servo-core:${servoVersion}"

diff --git a/eureka-core/build.gradle b/eureka-core/build.gradle
@@ -8,7 +8,7 @@ dependencies {
     compile "com.amazonaws:aws-java-sdk-route53:${awsVersion}"
     compile "javax.servlet:servlet-api:${servletVersion}"
     compile "com.netflix.governator:governator:${governatorVersion}"
-    compile 'com.thoughtworks.xstream:xstream:1.4.2'
+    compile 'com.thoughtworks.xstream:xstream:1.4.9'
     compile 'javax.ws.rs:jsr311-api:1.1.1'
 
     // These dependencies are marked 'provided' in the client, but we need them always on the server