From 32780c70147bf7273f7f6a8d81de1a1efd68a92c Mon Sep 17 00:00:00 2001 From: Patrick Brady Date: Thu, 13 Sep 2018 06:31:33 -0700 Subject: Remove logback 1.1.2 security issue Replace the logback version brought brought in by tosca datatype dependency of appc-config-params. Change-Id: I6ebeb13676ff284fa4c56b39028d2d91cffdf37a Signed-off-by: Patrick Brady Issue-ID: APPC-1018 --- appc-config/appc-config-params/provider/pom.xml | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/appc-config/appc-config-params/provider/pom.xml b/appc-config/appc-config-params/provider/pom.xml index 6501465b7..be07d7832 100644 --- a/appc-config/appc-config-params/provider/pom.xml +++ b/appc-config/appc-config-params/provider/pom.xml @@ -59,9 +59,17 @@ com.datastax.cassandra cassandra-driver-core + + ch.qos.logback + logback-classic + - + + ch.qos.logback + logback-classic + 1.2.3 + com.fasterxml.jackson.core jackson-databind @@ -118,7 +126,7 @@ org.onap.sdnc.config.params,org.onap.sdnc.config.params.data, org.onap.sdnc.config.params.parser,org.onap.sdnc.config.params.transformer, org.onap.sdnc.config.params.transformer.tosca,org.onap.sdnc.config.params.transformer.tosca.exceptions - !com.google.common.collect,* + groovy.lang;resolution:=optional,org.codehaus.groovy.*;resolution:=optional,!com.google.common.collect,* guava,jackson-databind,jackson-annotations,jackson-core,jackson-dataformat-yaml,eelf-core,logback-core,logback-classic * -- cgit 1.2.3-korg