From ff86f98e38f3df388ff3dfa3b3bd995707d05b9b Mon Sep 17 00:00:00 2001
From: liamfallon <liam.fallon@est.tech>
Date: Sun, 21 Jun 2020 21:52:55 +0100
Subject: Remove apex-pdp Jackson security issue

We should use the managed version of jackson from policy-parent rather
than a specific apex-pdp version.

Also upgrade the version of Avro, avro 1.9.2 uses a newer somewhat more
secure version of Jackson.

Issue-ID: POLICY-1508
Change-Id: If32218816ae76cf3cf6ddc8980e3a37e7e2ffd19
Signed-off-by: liamfallon <liam.fallon@est.tech>
---
 pom.xml | 15 ++-------------
 1 file changed, 2 insertions(+), 13 deletions(-)

(limited to 'pom.xml')

diff --git a/pom.xml b/pom.xml
index 3f2e4d7f0..bb5e5afa0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,9 +45,8 @@
         <version.commons-cli>1.4</version.commons-cli>
         <version.kafka>2.3.0</version.kafka>
         <version.hibernate>5.3.7.Final</version.hibernate>
-        <version.policy.common>1.6.5</version.policy.common>
-        <version.policy.models>2.2.6</version.policy.models>
-        <version.jackson>2.10.0.pr3</version.jackson>
+        <version.policy.common>1.7.0-SNAPSHOT</version.policy.common>
+        <version.policy.models>2.3.0-SNAPSHOT</version.policy.models>
         <version.jgroups>4.1.5.Final</version.jgroups>
         <version.commons-codec>20041127.091804</version.commons-codec>
         <version.caffeine>2.8.0</version.caffeine>
@@ -111,16 +110,6 @@
                 <artifactId>policy-endpoints</artifactId>
                 <version>${version.policy.common}</version>
             </dependency>
-           <dependency>
-                <groupId>com.fasterxml.jackson.core</groupId>
-                <artifactId>jackson-core</artifactId>
-                <version>${version.jackson}</version>
-            </dependency>
-            <dependency>
-                <groupId>com.fasterxml.jackson.core</groupId>
-                <artifactId>jackson-databind</artifactId>
-                <version>${version.jackson}</version>
-            </dependency>
             <dependency>
                 <groupId>org.jgroups</groupId>
                 <artifactId>jgroups</artifactId>
-- 
cgit 1.2.3-korg