[JENA-2222] Dependency updates for jena-geosparql and jena-fuseki-geosparql

• Type: Task
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Jena 4.3.2
• Fix Version/s: Jena 4.4.0
• Component/s: GeoSPARQL
• Assignee: Andy Seaborne
• Reporter: Andy Seaborne
• Created: 18/Dec/21 11:11
• Updated: 02/Feb/22 19:31
• Resolved: 19/Dec/21 12:15

Description

Found by running

mvn org.sonatype.ossindex.maven:ossindex-maven-plugin:audit -fn -f pom.xml

jdom:jdom2 and commons-beanutils:commons-beanutils are dependencies and need updates.

jdom:jdom2 : CVE-2021-33813 : 2.0.6 -> 2.0.6.1
beanutils: CVE-2019-10086 :1.9.3->1.9.4

Also:

Ideally, the version of all dependencies should be controlled in the Jena top POM.

Issue Links

• links to: GitHub Pull Request #1135