[alibaba#4822,alibaba#4823,alibaba#4824,alibaba#4825,alibaba#4979] Fi…

…x dependency security problem. (alibaba#5128)

* For alibaba#4822,alibaba#4823,alibaba#4824,alibaba#4825,alibaba#4979, Fix dependency security problem

* Fix jackson annotation version problem.

pom.xml

@@ -142,16 +142,17 @@
         <httpcore.version>4.4.1</httpcore.version>
         <httpclient.version>4.5</httpclient.version>
         <httpasyncclient.version>4.1.3</httpasyncclient.version>
-        <mysql-connector-java.version>8.0.16</mysql-connector-java.version>
+        <mysql-connector-java.version>8.0.21</mysql-connector-java.version>
         <derby.version>10.14.2.0</derby.version>
         <cglib-nodep.version>2.1</cglib-nodep.version>
         <jcip-annotations.version>1.0</jcip-annotations.version>
-        <jackson-core.version>2.10.4</jackson-core.version>
-        <jackson-databind.version>2.10.4</jackson-databind.version>
+        <jackson-core.version>2.12.2</jackson-core.version>
+        <jackson-databind.version>2.12.2</jackson-databind.version>
+        <jackson.annotations.version>2.12.2</jackson.annotations.version>
         <jackson-core-asl.version>1.9.13</jackson-core-asl.version>
         <jjwt.version>0.11.2</jjwt.version>
-        <netty-all.version>4.1.42.Final</netty-all.version>
-        <netty-common.version>4.1.31.Final</netty-common.version>
+        <netty-all.version>4.1.59.Final</netty-all.version>
+        <netty-common.version>4.1.59.Final</netty-common.version>
         <mina-core.version>2.0.0-RC1</mina-core.version>
         <guava.version>24.1.1-jre</guava.version>
         <javatuples.version>1.2</javatuples.version>
@@ -165,7 +166,7 @@
         <mockito-all.version>1.10.19</mockito-all.version>
         <hamcrest-all.version>1.3</hamcrest-all.version>
         <prometheus-simpleclient.version>0.5.0</prometheus-simpleclient.version>
-        <tomcat-embed-jasper.version>9.0.37</tomcat-embed-jasper.version>
+        <tomcat-embed-jasper.version>9.0.40</tomcat-embed-jasper.version>
         <truth.version>0.30</truth.version>
         <HikariCP.version>3.4.2</HikariCP.version>
         <jraft-core.version>1.3.5</jraft-core.version>
@@ -934,6 +935,11 @@
                 <artifactId>jackson-databind</artifactId>
                 <version>${jackson-databind.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-annotations</artifactId>
+                <version>${jackson.annotations.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.codehaus.jackson</groupId>
                 <artifactId>jackson-core-asl</artifactId>