From 884d6f53dccac9633ef83e578ef065a7ca2f9ec9 Mon Sep 17 00:00:00 2001
From: liamfallon <liam.fallon@ericsson.com>
Date: Tue, 19 Jun 2018 14:53:02 +0800
Subject: Remove plexus utils vul'y from XML event plugin

The plexus-utils dependency on JAXB on the XML event plugin has
security vulnerabilities. It is excluded as a dependency.

Change-Id: I84f3bbea221374e0e245ef427aac3ec1ba64f48f
Issue-ID: POLICY-905
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
---
 .../plugins-event-protocol/plugins-event-protocol-xml/pom.xml     | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'plugins')

diff --git a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
index fd2be45c1..0e5e57d13 100644
--- a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
+++ b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
@@ -38,7 +38,13 @@
         <dependency>
             <groupId>org.jvnet.jaxb2.maven2</groupId>
             <artifactId>maven-jaxb2-plugin</artifactId>
-            <version>0.13.2</version>
+            <version>0.14.0</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.codehaus.plexus</groupId>
+                    <artifactId>plexus-utils</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.jvnet.jaxb2_commons</groupId>
-- 
cgit 1.2.3-korg