diff options
| author |   Lo, WEI-TING(wl849v) <wl849v@att.com> | 2018-03-27 19:24:12 -0400 |
|---|---|---|
| committer | Lo, WEI-TING(wl849v) <wl849v@att.com> | 2018-03-27 19:24:12 -0400 |
| commit | 03c53c05213f0c01b8b9b03025129b9fbe801384 (patch) | |
| tree | 13a2cdef602d26bc021112705771ad73f2ba37ac /ecomp-sdk/epsdk-music/pom.xml | |
| parent | 246e8869946e22bd490912d00a23386d47507d2e (diff) | |
Security Vulnerabilities
Issue-ID: PORTAL-155
Includes Security Vulnerabilities and music jar
Change-Id: Id85471555461adf2127db66ed3d4f4a3d5a06fe4
Signed-off-by: Lo, WEI-TING(wl849v) <wl849v@att.com>
Diffstat (limited to 'ecomp-sdk/epsdk-music/pom.xml')
| -rw-r--r-- | ecomp-sdk/epsdk-music/pom.xml | 78 |
1 files changed, 49 insertions, 29 deletions
diff --git a/ecomp-sdk/epsdk-music/pom.xml b/ecomp-sdk/epsdk-music/pom.xml index 3b188176..2c2a7e1b 100644 --- a/ecomp-sdk/epsdk-music/pom.xml +++ b/ecomp-sdk/epsdk-music/pom.xml @@ -7,7 +7,7 @@ <artifactId>epsdk-project</artifactId> <version>2.2.0-SNAPSHOT</version> </parent> - + <groupId>org.onap.portal.sdk</groupId> <artifactId>epsdk-music</artifactId> <version>2.2.0-SNAPSHOT</version> @@ -18,7 +18,7 @@ <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> - <springframework.version>4.2.0.RELEASE</springframework.version> + <springframework.version>4.2.3.RELEASE</springframework.version> <jersey1.version>1.19.4</jersey1.version> <jaxrs.version>2.0.1</jaxrs.version> <cassandra.version>3.0.0</cassandra.version> @@ -108,35 +108,45 @@ <groupId>com.att.eelf</groupId> <artifactId>eelf-core</artifactId> <version>1.0.0</version> + <exclusions> + <exclusion> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-classic</artifactId> + </exclusion> + <exclusion> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-core</artifactId> + </exclusion> + </exclusions> </dependency> <!-- Music --> <dependency> <groupId>org.onap.music</groupId> <artifactId>core</artifactId> - <version>2.4.4</version> - </dependency> - <dependency> + <version>2.4.4.1</version> + </dependency> + <!-- <dependency> <groupId>org.onap.music</groupId> <artifactId>dependency</artifactId> <version>2.4.4</version> - </dependency> + </dependency> --> <!-- Mapper --> <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-annotations</artifactId> - <version>2.6.3</version> + <version>2.8.10</version> </dependency> <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-core</artifactId> - <version>2.6.3</version> + <version>2.8.10</version> </dependency> <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-databind</artifactId> - <version>2.6.3</version> + <version>2.8.10</version> </dependency> <dependency> <groupId>org.springframework.session</groupId> @@ -148,6 +158,16 @@ <artifactId>json</artifactId> <version>20160212</version> </dependency> + <dependency> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-core</artifactId> + <version>1.2.3</version> + </dependency> + <dependency> + <groupId>ch.qos.logback</groupId> + <artifactId>logback-classic</artifactId> + <version>1.2.3</version> + </dependency> </dependencies> <profiles> <!-- disable doclint, a new feature in Java 8, when generating javadoc --> @@ -186,26 +206,26 @@ </configuration> </plugin> <plugin> - <artifactId>maven-assembly-plugin</artifactId> - <configuration> - <archive> - <manifest> - </manifest> - </archive> - <descriptorRefs> - <descriptorRef>jar-with-dependencies</descriptorRef> - </descriptorRefs> - </configuration> - <executions> - <execution> - <id>make-assembly</id> <!-- this is used for inheritance merges --> - <phase>package</phase> <!-- bind to the packaging phase --> - <goals> - <goal>single</goal> - </goals> - </execution> - </executions> - </plugin> + <artifactId>maven-assembly-plugin</artifactId> + <configuration> + <archive> + <manifest> + </manifest> + </archive> + <descriptorRefs> + <descriptorRef>jar-with-dependencies</descriptorRef> + </descriptorRefs> + </configuration> + <executions> + <execution> + <id>make-assembly</id> <!-- this is used for inheritance merges --> + <phase>package</phase> <!-- bind to the packaging phase --> + <goals> + <goal>single</goal> + </goals> + </execution> + </executions> + </plugin> </plugins> </build> </project> |