From 886191eea29a6a87b891d869e8b3855c95967c49 Mon Sep 17 00:00:00 2001
From: "Determe, Sebastien (sd378r)" <sd378r@intl.att.com>
Date: Fri, 2 Mar 2018 11:42:06 +0100
Subject: Update some dependencies

Update versions of some dependencies as reported by Nexus IQ

Issue-ID: CLAMP-135
Change-Id: I79b6e7f464032630f5d07c4d00999a38da50d2a6
Signed-off-by: Determe, Sebastien (sd378r) <sd378r@intl.att.com>
---
 pom.xml | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

(limited to 'pom.xml')

diff --git a/pom.xml b/pom.xml
index 5663d988..2f1a7d24 100644
--- a/pom.xml
+++ b/pom.xml
@@ -251,7 +251,7 @@
 				<dependency>
 						<groupId>org.apache.commons</groupId>
 						<artifactId>commons-vfs2</artifactId>
-						<version>2.0</version>
+						<version>2.2</version>
 				</dependency>
 				<dependency>
 						<groupId>joda-time</groupId>
@@ -293,11 +293,6 @@
 						<artifactId>hibernate-annotations</artifactId>
 						<version>3.5.6-Final</version>
 				</dependency>
-				<!-- <dependency> -->
-				<!-- <groupId>org.apache.geronimo.specs</groupId> -->
-				<!-- <artifactId>geronimo-jpa_2.0_spec</artifactId> -->
-				<!-- <version>1.1</version> -->
-				<!-- </dependency> -->
 				<dependency>
 						<groupId>dom4j</groupId>
 						<artifactId>dom4j</artifactId>
@@ -464,6 +459,22 @@
 						<artifactId>jsf-impl</artifactId>
 						<version>2.1.7</version>
 				</dependency>
+				<!-- Other dependencies to fix nexus IQ reported vulnerabilities -->
+				<dependency>
+					<groupId>org.codehaus.plexus</groupId>
+					<artifactId>plexus-utils</artifactId>
+					<version>3.0.24</version>
+				</dependency>
+				<dependency>
+					<groupId>commons-fileupload</groupId>
+					<artifactId>commons-fileupload</artifactId>
+					<version>1.3.3</version>
+				</dependency>
+				<dependency>
+					<groupId>org.jboss.spec.javax.ws.rs</groupId>
+					<artifactId>jboss-jaxrs-api_2.0_spec</artifactId>
+					<version>1.0.1.Final</version>
+				</dependency>
 				<!-- Remove the MYSQL connector and replace it by Mariadb -->
 				<dependency>
 						<groupId>org.mariadb.jdbc</groupId>
-- 
cgit 1.2.3-korg