From 7a46ac086e32acd90687a6c6818e4603f24f3f42 Mon Sep 17 00:00:00 2001
From: "LaMont, William (wl2432)" <wl2432@att.com>
Date: Wed, 19 Sep 2018 15:02:15 -0400
Subject: fix cacher merge and nexus vulnerabilities

Issue-ID: AAI-1636
Change-Id: I971c20db4f490e99ed835e1591a0291d477e82ae
Signed-off-by: LaMont, William (wl2432) <wl2432@att.com>
---
 pom.xml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

(limited to 'pom.xml')

diff --git a/pom.xml b/pom.xml
index 7ff4efd..c7e685f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -83,7 +83,7 @@
 		<!-- End of the jacoco plugin properties -->
 		
 		<json.version>20090211</json.version>
-		<logback.version>1.1.7</logback.version>
+		<logback.version>1.2.3</logback.version>
 		<eelf.core.version>1.0.0</eelf.core.version>
 		<mockito.version>1.10.19</mockito.version>
 		<json.assert.version>1.5.0</json.assert.version>
@@ -238,7 +238,7 @@
 		<dependency>
 			<groupId>org.apache.httpcomponents</groupId>
 			<artifactId>httpclient</artifactId>
-			<version>4.5.1</version>
+			<version>4.5.6</version>
 		</dependency>
 		<dependency>
 			<groupId>com.google.code.gson</groupId>
@@ -249,7 +249,18 @@
 			<groupId>de.flapdoodle.embed</groupId>
 			<artifactId>de.flapdoodle.embed.mongo</artifactId>
 			<version>2.0.3</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.apache.commons</groupId>
+                    <artifactId>commons-compress</artifactId>
+                </exclusion>
+            </exclusions>			
 		</dependency>
+		<dependency>
+			<groupId>org.apache.commons</groupId>
+			<artifactId>commons-compress</artifactId>
+			<version>1.18</version>
+		</dependency>		
 		<dependency>
 			<groupId>org.mongodb</groupId>
 			<artifactId>mongodb-driver</artifactId>
-- 
cgit 1.2.3-korg