From 3dfac2fcf1555b64a73317d1c4815f59264a34a0 Mon Sep 17 00:00:00 2001
From: jansupol <jan.supol@oracle.com>
Date: Wed, 30 Mar 2022 19:18:19 +0200
Subject: [PATCH 1/2] Update Xerces to prevent CVEs

Signed-off-by: jansupol <jan.supol@oracle.com>
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 2abb04d3c4..969ec9716a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,7 @@
     <parent>
         <groupId>org.eclipse.ee4j</groupId>
         <artifactId>project</artifactId>
-        <version>1.0.6</version>
+        <version>1.0.7</version>
     </parent>
 
     <groupId>org.glassfish.jersey</groupId>
@@ -2165,7 +2165,7 @@
         <validation.impl.version>6.2.0.Final</validation.impl.version>
         <weld.version>2.2.14.Final</weld.version> <!-- 2.4.1 doesn't work - bv tests -->
         <weld3.version>3.1.7.SP1</weld3.version>
-        <xerces.version>2.11.0</xerces.version>
+        <xerces.version>2.12.1</xerces.version>
 
         <!-- Graal VM       -->
         <graalvm.version>20.3.2</graalvm.version>

From 6e90233a527ef6e4431585c091b2e71fc036fd38 Mon Sep 17 00:00:00 2001
From: jansupol <jan.supol@oracle.com>
Date: Thu, 31 Mar 2022 11:13:24 +0200
Subject: [PATCH 2/2] Update 2.12.2

Signed-off-by: jansupol <jan.supol@oracle.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 969ec9716a..62bcb7be69 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2165,7 +2165,7 @@
         <validation.impl.version>6.2.0.Final</validation.impl.version>
         <weld.version>2.2.14.Final</weld.version> <!-- 2.4.1 doesn't work - bv tests -->
         <weld3.version>3.1.7.SP1</weld3.version>
-        <xerces.version>2.12.1</xerces.version>
+        <xerces.version>2.12.2</xerces.version>
 
         <!-- Graal VM       -->
         <graalvm.version>20.3.2</graalvm.version>