diff options
| author |   Ravi Geda <gravik@amdocs.com> | 2018-05-02 15:26:46 +0100 |
|---|---|---|
| committer | Ravi Geda <gravik@amdocs.com> | 2018-05-02 15:26:46 +0100 |
| commit | f7bfc43799cd6adbf8997c532993949b6cd75ce4 (patch) | |
| tree | 9634aefa1c421364c33fb00eea391f63004c99a8 | |
| parent | 92927f8985ae5f381143b8b295df2f466e4349ae (diff) | |
Address critical security issues
Address security vulnerabilities identified by Nexus IQ
Change-Id: I0a795bb0c0e8a53438b83e8aadce72a316163cc4
Issue-ID: AAI-1116
Signed-off-by: Ravi Geda <gravik@amdocs.com>
| -rw-r--r-- | pom.xml | 26 |
1 files changed, 24 insertions, 2 deletions
@@ -77,6 +77,12 @@ limitations under the License. <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter</artifactId> + <exclusions> + <exclusion> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-classic</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> @@ -92,6 +98,22 @@ limitations under the License. <version>3.2.4</version> </dependency> <dependency> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-classic</artifactId> + <version>1.2.3</version> + </dependency> + <dependency> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-core</artifactId> + <version>1.2.3</version> + <exclusions> + <exclusion> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-classic</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> <groupId>com.google.guava</groupId> <artifactId>guava</artifactId> <version>23.0</version> @@ -104,7 +126,7 @@ limitations under the License. <dependency> <groupId>org.codehaus.jackson</groupId> <artifactId>jackson-mapper-asl</artifactId> - <version>1.9.13</version> + <version>1.4.5</version> </dependency> <dependency> <groupId>org.mockito</groupId> @@ -267,7 +289,7 @@ limitations under the License. <dependency> <groupId>org.apache.httpcomponents</groupId> <artifactId>httpclient</artifactId> - <version>4.5</version> + <version>4.5.3</version> </dependency> <dependency> <groupId>org.apache.httpcomponents</groupId> |