summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPatrick Brady <pb071s@att.com>2018-09-13 06:31:33 -0700
committerPatrick Brady <pb071s@att.com>2018-09-21 16:03:22 +0000
commit32780c70147bf7273f7f6a8d81de1a1efd68a92c (patch)
tree2b4c6cbfb634e941b599d7b915315f05dbff4105
parent55393633ac29b83662db980ccbf03b9991c7b06c (diff)
Remove logback 1.1.2 security issue
Replace the logback version brought brought in by tosca datatype dependency of appc-config-params. Change-Id: I6ebeb13676ff284fa4c56b39028d2d91cffdf37a Signed-off-by: Patrick Brady <pb071s@att.com> Issue-ID: APPC-1018
-rw-r--r--appc-config/appc-config-params/provider/pom.xml12
1 files changed, 10 insertions, 2 deletions
diff --git a/appc-config/appc-config-params/provider/pom.xml b/appc-config/appc-config-params/provider/pom.xml
index 6501465b7..be07d7832 100644
--- a/appc-config/appc-config-params/provider/pom.xml
+++ b/appc-config/appc-config-params/provider/pom.xml
@@ -59,9 +59,17 @@
<groupId>com.datastax.cassandra</groupId>
<artifactId>cassandra-driver-core</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>ch.qos.logback</groupId>
+ <artifactId>logback-classic</artifactId>
+ </exclusion>
</exclusions>
</dependency>
-
+<dependency>
+ <groupId>ch.qos.logback</groupId>
+ <artifactId>logback-classic</artifactId>
+ <version>1.2.3</version>
+ </dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
@@ -118,7 +126,7 @@
<Export-Package>org.onap.sdnc.config.params,org.onap.sdnc.config.params.data,
org.onap.sdnc.config.params.parser,org.onap.sdnc.config.params.transformer,
org.onap.sdnc.config.params.transformer.tosca,org.onap.sdnc.config.params.transformer.tosca.exceptions</Export-Package>
- <Import-Package>!com.google.common.collect,*</Import-Package>
+ <Import-Package>groovy.lang;resolution:=optional,org.codehaus.groovy.*;resolution:=optional,!com.google.common.collect,*</Import-Package>
<Embed-Dependency>guava,jackson-databind,jackson-annotations,jackson-core,jackson-dataformat-yaml,eelf-core,logback-core,logback-classic</Embed-Dependency>
<DynamicImport-Package>*</DynamicImport-Package>
</instructions>