From 632f19eab32416168ad0e4611b9e130aaea4c2fa Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Fri, 6 Sep 2019 12:45:12 +0430
Subject: [PATCH] WW-5038 Upgrades jackson-databind to version 2.9.9.3 plus
 upgrades jackson-core to 2.9.9

(cherry picked from commit 8187006)
---
 pom.xml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 2fff51b55..bb2aef47d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,6 +104,8 @@
         <tiles-request.version>1.0.7</tiles-request.version>
         <log4j2.version>2.11.2</log4j2.version>
         <jackson.version>2.9.9</jackson.version>
+        <!-- FIXME: drop once a new 2.9.10 will be out and all packages will be in sync -->
+        <jackson-databind.version>2.9.9.3</jackson-databind.version>
 
         <!-- Site generation -->
         <fluido-skin.version>1.7</fluido-skin.version>
@@ -1080,14 +1082,22 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${jackson.version}</version>
+                <version>${jackson-databind.version}</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.dataformat</groupId>
                 <artifactId>jackson-dataformat-xml</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
-            
+
+            <!-- FIXME: Workaround for jackson-dataformat-xml issue #340 of forgetting to update stax2-api  -->
+            <!-- https://github.com/FasterXML/jackson-dataformat-xml/issues/340 -->
+            <dependency>
+                <groupId>org.codehaus.woodstox</groupId>
+                <artifactId>stax2-api</artifactId>
+                <version>4.1</version>
+            </dependency>
+
             <!-- CDI & Weld -->
             <dependency>
                 <groupId>javax.enterprise</groupId>