From ff286ea030490eef3d57df78eb5c92c1ea7b8ea6 Mon Sep 17 00:00:00 2001
From: Taka Cho <tc012c@att.com>
Date: Fri, 23 Feb 2018 21:30:06 -0500
Subject: security issue: commons-collections

Change-Id: I74a56640065ae6c6a470835ab1022ed0f266fc09
Issue-ID: APPC-665
Signed-off-by: Taka Cho <tc012c@att.com>
---
 appc-inbound/appc-design-services/provider/pom.xml  | 11 +++++++++++
 appc-inbound/appc-interfaces-service/bundle/pom.xml | 11 +++++++++++
 appc-inbound/pom.xml                                |  2 +-
 3 files changed, 23 insertions(+), 1 deletion(-)

(limited to 'appc-inbound')

diff --git a/appc-inbound/appc-design-services/provider/pom.xml b/appc-inbound/appc-design-services/provider/pom.xml
index da027a559..b72f29048 100755
--- a/appc-inbound/appc-design-services/provider/pom.xml
+++ b/appc-inbound/appc-design-services/provider/pom.xml
@@ -157,6 +157,17 @@
             <groupId>org.apache.velocity</groupId>
             <artifactId>velocity</artifactId>
             <version>1.7</version>
+            <exclusions>
+                  <exclusion>
+                        <artifactId>commons-collections</artifactId>
+                        <groupId>commons-collections</groupId>
+                  </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>commons-collections</groupId>
+            <artifactId>commons-collections</artifactId>
+            <version>3.2.2</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
diff --git a/appc-inbound/appc-interfaces-service/bundle/pom.xml b/appc-inbound/appc-interfaces-service/bundle/pom.xml
index 997600227..8a4586ea3 100644
--- a/appc-inbound/appc-interfaces-service/bundle/pom.xml
+++ b/appc-inbound/appc-interfaces-service/bundle/pom.xml
@@ -141,6 +141,17 @@
             <groupId>org.apache.velocity</groupId>
             <artifactId>velocity</artifactId>
             <version>1.7</version>
+            <exclusions>
+                 <exclusion>
+                      <artifactId>commons-collections</artifactId>
+                      <groupId>commons-collections</groupId>
+                 </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>commons-collections</groupId>
+            <artifactId>commons-collections</artifactId>
+            <version>3.2.2</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
diff --git a/appc-inbound/pom.xml b/appc-inbound/pom.xml
index 4517fa030..d6373ac7e 100755
--- a/appc-inbound/pom.xml
+++ b/appc-inbound/pom.xml
@@ -37,7 +37,7 @@
         <snakeyaml.version>1.12</snakeyaml.version>
         <velocity.version>1.7</velocity.version>
         <jettison.version>1.3.7</jettison.version>
-        <common.collections.version>3.2.1</common.collections.version>
+        <commons.collections.version>3.2.2</commons.collections.version>
         <common.io.version>2.5</common.io.version>
         <tosca.datatype.version>1.1.0</tosca.datatype.version> 
     </properties>
-- 
cgit 1.2.3-korg