From c747114b805c85f4a111f35f289b2e58acf92ef9 Mon Sep 17 00:00:00 2001 From: efiacor Date: Thu, 15 Jul 2021 14:13:18 +0100 Subject: [DMAAP-MR] Fix vulnerabilities for rel I Signed-off-by: efiacor Change-Id: Ie900556f2542c154cbef8c5a11db86bcc46402f7 Issue-ID: DMAAP-1608 --- pom.xml | 92 ++++++++++------------ .../ajsc/dmaap_v1/dmaap/v1/conf/jaxrsBeans.groovy | 2 +- .../java/org/onap/dmaap/service/MMRestService.java | 37 ++------- .../resources/docker-compose/docker-compose.yml | 2 +- .../docker-compose/kafka/zk_client_jaas.conf | 6 +- .../docker-compose/zk/zk_server_jaas.conf | 2 +- src/test/java/org/onap/dmaap/JUnitTestSuite.java | 6 +- src/test/java/org/onap/dmaap/TestRunner.java | 6 +- .../java/org/onap/dmaap/mmagent/TestRunner.java | 5 +- .../dmaap/mr/cambria/embed/ZooKeeperLocal.java | 3 +- .../streamReaders/CambriaJsonStreamReaderTest.java | 3 - .../streamReaders/CambriaRawStreamReaderTest.java | 3 - .../java/org/onap/dmaap/util/JUnitTestSuite.java | 5 +- 13 files changed, 70 insertions(+), 102 deletions(-) diff --git a/pom.xml b/pom.xml index 26809db..1ebf280 100644 --- a/pom.xml +++ b/pom.xml @@ -86,9 +86,9 @@ 2.21.5 3.5.0 /content/sites/site/org/onap/dmaap/messagerouter/messageservice/${project.artifactId}/${project.version} - true - true - true + false + false + false https://nexus.onap.org nexus3.onap.org:10003 3.2.18.RELEASE @@ -100,6 +100,7 @@ 2.13.3 8 8 + false @@ -118,16 +119,7 @@ org.apache.maven.plugins maven-site-plugin - 3.6 - - - org.apache.maven.wagon - wagon-webdav-jackrabbit - 2.10 - - - org.apache.maven.plugins maven-jar-plugin @@ -163,8 +155,6 @@ - - com.blackducksoftware.integration hub-maven-plugin @@ -189,7 +179,13 @@ 2.8.0-01 true - + + maven-deploy-plugin + 3.0.0-M1 + + ${skip.deploy} + + @@ -274,7 +270,6 @@ - org.apache.cxf cxf-rt-transports-http @@ -310,7 +305,12 @@ org.apache.zookeeper zookeeper - 3.4.14 + 3.7.0 + + + com.101tec + zkclient + 0.2 org.slf4j @@ -347,8 +347,8 @@ org.apache.kafka - kafka_2.11 - 0.11.0.3 + kafka_2.13 + 2.8.0 commons-codec @@ -436,7 +436,7 @@ org.springframework spring-webmvc - 4.3.18.RELEASE + 5.3.3 org.springframework @@ -448,12 +448,10 @@ spring-beans 4.3.18.RELEASE - - - org.apache.commons + commons-io commons-io - 1.3.2 + 2.11.0 com.att.eelf @@ -474,7 +472,6 @@ - com.att.nsa @@ -509,7 +506,6 @@ curator-recipes 4.0.1 - org.apache.curator curator-test @@ -560,17 +556,13 @@ jackson-jaxrs-json-provider 2.2.3 - com.fasterxml.jackson.core jackson-core - 2.11.2 - com.fasterxml.jackson.core jackson-databind - 2.11.2 org.grails @@ -586,8 +578,8 @@ org.codehaus.groovy groovy-all - 2.4.8 - compile + 3.0.8 + pom jline @@ -595,20 +587,17 @@ - junit junit - 4.11 + 4.13.2 test - org.json json 20131018 - org.apache.cxf @@ -632,11 +621,16 @@ 3.0.11-oss pom - org.onap.aaf.authz aaf-cadi-aaf 2.7.4 + + + log4j + log4j + + backport-util-concurrent @@ -728,7 +722,7 @@ org.igniterealtime.smack smack-tcp - 4.1.0-rc1 + 4.4.2 org.apache.camel @@ -747,8 +741,13 @@ 3.0.11-oss provided - - + + org.apache.kafka + kafka_2.12 + 2.7.0 + test + +