From db12e7cd46a0e02d12a33f3d2be1f1941db9ff95 Mon Sep 17 00:00:00 2001
From: Joseph Chou <jc2555@att.com>
Date: Wed, 25 Mar 2020 18:12:12 -0400
Subject: Upgrade jar version to resolve security risk

Upgrade ant, hibernate-core and commons-configuration

Issue-ID: POLICY-2439
Change-Id: I6c22e634e81850ed97c6214ffc202eb68007b8b3
Signed-off-by: Joseph Chou <jc2555@att.com>
---
 policy-core/pom.xml  | 10 ++++++++++
 policy-utils/pom.xml |  2 +-
 pom.xml              |  2 +-
 3 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/policy-core/pom.xml b/policy-core/pom.xml
index 7f20b58e..d885f6f5 100644
--- a/policy-core/pom.xml
+++ b/policy-core/pom.xml
@@ -42,6 +42,12 @@
             <artifactId>kie-api</artifactId>
         </dependency>
 
+        <dependency>
+            <groupId>org.apache.ant</groupId>
+            <artifactId>ant</artifactId>
+            <version>1.9.12</version>
+        </dependency>
+
         <dependency>
             <groupId>org.kie</groupId>
             <artifactId>kie-ci</artifactId>
@@ -56,6 +62,10 @@
                     <groupId>org.codehaus.plexus</groupId>
                     <artifactId>plexus-utils</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.apache.ant</groupId>
+                    <artifactId>ant</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
diff --git a/policy-utils/pom.xml b/policy-utils/pom.xml
index 1946947f..45f43dd7 100644
--- a/policy-utils/pom.xml
+++ b/policy-utils/pom.xml
@@ -54,7 +54,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-configuration2</artifactId>
-            <version>2.4</version>
+            <version>2.7</version>
         </dependency>
         <dependency>
             <groupId>org.onap.policy.common</groupId>
diff --git a/pom.xml b/pom.xml
index c2d68871..528aed6c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -48,7 +48,7 @@
 
         <!-- Project common dependency versions -->
         <json.path.version>2.4.0</json.path.version>
-        <hibernate.core.version>5.2.10.Final</hibernate.core.version>
+        <hibernate.core.version>5.4.12.Final</hibernate.core.version>
         <hibernate.commons.annotations.version>5.0.1.Final</hibernate.commons.annotations.version>
         <commons.io.version>2.5</commons.io.version>
         <xml.apis.version>1.4.01</xml.apis.version>
-- 
cgit 1.2.3-korg