From 7af2403dd9a6c95b12efec59e60d47125dc8e286 Mon Sep 17 00:00:00 2001
From: st398c <st398c@research.att.com>
Date: Fri, 14 Jun 2019 14:36:53 -0400
Subject: Blackduck scan fixes

Issue-ID: PORTAL-631

Change-Id: I1a09436f606831378b7f2a6211b1199ab830e06e
Signed-off-by: st398c <st398c@research.att.com>
---
 ecomp-sdk/epsdk-app-common/pom.xml | 50 ++++++++++++++++++++++++++++++++++++--
 1 file changed, 48 insertions(+), 2 deletions(-)

(limited to 'ecomp-sdk/epsdk-app-common/pom.xml')

diff --git a/ecomp-sdk/epsdk-app-common/pom.xml b/ecomp-sdk/epsdk-app-common/pom.xml
index 7125136e..1dba1420 100644
--- a/ecomp-sdk/epsdk-app-common/pom.xml
+++ b/ecomp-sdk/epsdk-app-common/pom.xml
@@ -176,7 +176,7 @@
 		<dependency>
 			<groupId>org.elasticsearch</groupId>
 			<artifactId>elasticsearch</artifactId>
-			<version>2.2.0</version>
+			<version>7.1.1</version>
 			<exclusions>
 				<exclusion>
 					<groupId>org.apache.lucene</groupId>
@@ -268,8 +268,54 @@
         	<groupId>org.beanshell</groupId>
             <artifactId>bsh-core</artifactId>
 		</exclusion>
+		<exclusion>
+        	<groupId>org.beanshell</groupId>
+            <artifactId>bsh-core</artifactId>
+		</exclusion>
+		<exclusion>
+			<groupId>log4j</groupId>
+			<artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+			<groupId>log4j</groupId>
+			<artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+			<groupId>org.apache.xmlgraphics</groupId>
+			<artifactId>batik-css</artifactId>
+		</exclusion>
+		<exclusion>
+			<groupId>org.apache.xmlgraphics</groupId>
+			<artifactId>batik-ext</artifactId>
+		</exclusion>
+		<exclusion>
+			<groupId>org.apache.xmlgraphics</groupId>
+			<artifactId>batik-util</artifactId>
+		</exclusion>
         </exclusions>
 	</dependency>
+	<dependency>
+		<groupId>org.apache.xmlgraphics</groupId>
+		<artifactId>batik-css</artifactId>
+		<version>1.8</version>
+	</dependency>
+	<dependency>
+		<groupId>org.apache.xmlgraphics</groupId>
+		<artifactId>batik-ext</artifactId>
+		<version>1.8</version>
+	</dependency>	
+	<dependency>
+		<groupId>org.apache.xmlgraphics</groupId>
+		<artifactId>batik-util</artifactId>
+		<version>1.8</version>
+	</dependency>
+	<dependency>
+	    <groupId>org.apache.logging.log4j</groupId>
+	    <artifactId>log4j</artifactId>
+	    <version>2.11.2</version>
+	    <type>pom</type>
+	</dependency>
+	
 	<!-- Jacoco for offline instrumentation -->
 		<dependency>
 			<groupId>org.jacoco</groupId>
@@ -280,7 +326,7 @@
 		<dependency>
     		<groupId>com.thoughtworks.xstream</groupId>
     		<artifactId>xstream</artifactId>
-    		<version>1.4.10</version>
+    		<version>1.4.11.1</version>
 		</dependency>
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
-- 
cgit 1.2.3-korg