From ff286ea030490eef3d57df78eb5c92c1ea7b8ea6 Mon Sep 17 00:00:00 2001
From: Taka Cho <tc012c@att.com>
Date: Fri, 23 Feb 2018 21:30:06 -0500
Subject: security issue: commons-collections

Change-Id: I74a56640065ae6c6a470835ab1022ed0f266fc09
Issue-ID: APPC-665
Signed-off-by: Taka Cho <tc012c@att.com>
---
 appc-config/appc-config-generator/provider/pom.xml          | 13 ++++++++++++-
 .../features/src/main/resources/features.xml                |  2 +-
 2 files changed, 13 insertions(+), 2 deletions(-)

(limited to 'appc-config')

diff --git a/appc-config/appc-config-generator/provider/pom.xml b/appc-config/appc-config-generator/provider/pom.xml
index 910ac6d85..50a016608 100644
--- a/appc-config/appc-config-generator/provider/pom.xml
+++ b/appc-config/appc-config-generator/provider/pom.xml
@@ -73,7 +73,18 @@
         <dependency>
             <groupId>org.apache.velocity</groupId>
             <artifactId>velocity</artifactId>
-        </dependency>
+            <exclusions>
+                 <exclusion>
+                       <artifactId>commons-collections</artifactId>
+                       <groupId>commons-collections</groupId>
+                  </exclusion>
+            </exclusions>
+         </dependency>
+         <dependency>
+                <groupId>commons-collections</groupId>
+                <artifactId>commons-collections</artifactId>
+                <version>3.2.2</version>
+          </dependency>
 
         <dependency>
             <groupId>com.att.eelf</groupId>
diff --git a/appc-config/appc-data-services/features/src/main/resources/features.xml b/appc-config/appc-data-services/features/src/main/resources/features.xml
index 6bc7cc9fc..7d58abb1c 100644
--- a/appc-config/appc-data-services/features/src/main/resources/features.xml
+++ b/appc-config/appc-data-services/features/src/main/resources/features.xml
@@ -37,7 +37,7 @@
 		
 		<bundle>mvn:commons-lang/commons-lang/2.6</bundle>
 		
-		<bundle>mvn:commons-collections/commons-collections/3.2.1</bundle>
+		<bundle>mvn:commons-collections/commons-collections/3.2.2</bundle>
 
 		<bundle>wrap:mvn:com.att.eelf/eelf-core/${eelf.version}</bundle>
 		<bundle>mvn:ch.qos.logback/logback-core/${logback.version}</bundle>
-- 
cgit 1.2.3-korg