From 791ef7832edc7478ec344ed47c90aa5826e95b8e Mon Sep 17 00:00:00 2001
From: liamfallon <liam.fallon@est.tech>
Date: Tue, 2 Jul 2019 11:01:03 +0000
Subject: Fix security vulnerabilities in apex-pdp

Upgraded the versions of avro, jquery and jgroups to versions
in order to remove security vulnerabilities.

Issue-ID: POLICY-1074
Change-Id: I412b9c951b061b19e6ae6edacf7b3785d4c7869b
Signed-off-by: liamfallon <liam.fallon@est.tech>
---
 .../plugins-context-schema/plugins-context-schema-avro/pom.xml   | 4 ++--
 .../plugins-event-carrier/plugins-event-carrier-jms/pom.xml      | 9 +++++++++
 2 files changed, 11 insertions(+), 2 deletions(-)

(limited to 'plugins')

diff --git a/plugins/plugins-context/plugins-context-schema/plugins-context-schema-avro/pom.xml b/plugins/plugins-context/plugins-context-schema/plugins-context-schema-avro/pom.xml
index 5ec6962aa..9ddd1cf48 100644
--- a/plugins/plugins-context/plugins-context-schema/plugins-context-schema-avro/pom.xml
+++ b/plugins/plugins-context/plugins-context-schema/plugins-context-schema-avro/pom.xml
@@ -33,7 +33,7 @@
         <dependency>
             <groupId>org.apache.avro</groupId>
             <artifactId>avro</artifactId>
-            <version>1.8.2</version>
+            <version>1.9.0</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.commons</groupId>
@@ -65,4 +65,4 @@
             </distributionManagement>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
index 3d1b86bfd..f2e5a069e 100644
--- a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
+++ b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
@@ -43,6 +43,10 @@
                     <groupId>commons-beanutils</groupId>
                     <artifactId>commons-beanutils</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jgroups</groupId>
+                    <artifactId>jgroups</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -50,6 +54,11 @@
             <artifactId>netty-all</artifactId>
             <version>4.1.25.Final</version>
         </dependency>
+        <dependency>
+            <groupId>org.jgroups</groupId>
+            <artifactId>jgroups</artifactId>
+            <version>4.1.1.Final</version>
+        </dependency>
     </dependencies>
     
     <profiles>
-- 
cgit 1.2.3-korg