From ff286ea030490eef3d57df78eb5c92c1ea7b8ea6 Mon Sep 17 00:00:00 2001
From: Taka Cho <tc012c@att.com>
Date: Fri, 23 Feb 2018 21:30:06 -0500
Subject: security issue: commons-collections

Change-Id: I74a56640065ae6c6a470835ab1022ed0f266fc09
Issue-ID: APPC-665
Signed-off-by: Taka Cho <tc012c@att.com>
---
 appc-sdc-listener/appc-sdc-listener-bundle/pom.xml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

(limited to 'appc-sdc-listener/appc-sdc-listener-bundle')

diff --git a/appc-sdc-listener/appc-sdc-listener-bundle/pom.xml b/appc-sdc-listener/appc-sdc-listener-bundle/pom.xml
index 2e61b7010..b59525201 100644
--- a/appc-sdc-listener/appc-sdc-listener-bundle/pom.xml
+++ b/appc-sdc-listener/appc-sdc-listener-bundle/pom.xml
@@ -150,9 +150,19 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
 			<groupId>org.apache.velocity</groupId>
 			<artifactId>velocity</artifactId>
 			<version>1.7</version>
-		</dependency>
-
-		<dependency>
+                        <exclusions>
+                             <exclusion>
+                                  <artifactId>commons-collections</artifactId>
+                                  <groupId>commons-collections</groupId>
+                             </exclusion>
+                        </exclusions>
+                 </dependency>
+                 <dependency>
+                     <groupId>commons-collections</groupId>
+                     <artifactId>commons-collections</artifactId>
+                     <version>3.2.2</version>
+                 </dependency>
+		 <dependency>
 			<groupId>org.opendaylight.yangtools</groupId>
 			<artifactId>yang-parser-impl</artifactId>
 			<version>${odl.yangtools.version}</version>
-- 
cgit 1.2.3-korg