From 3cea65c213e29b9086e9a2e4aae910cff00e7a93 Mon Sep 17 00:00:00 2001
From: sm921c <sm921c@att.com>
Date: Wed, 4 Apr 2018 15:09:15 -0400
Subject: security and Pom chanages

Issue-ID: PORTAL-155

provided fixes for security issues

Change-Id: I00a06dffe4c6efecff57272949fea9d0a614018c
Signed-off-by: sm921c <sm921c@att.com>
---
 ecomp-sdk/epsdk-fw/pom.xml | 40 ++++++++++++++++++++++++++++++++++++----
 1 file changed, 36 insertions(+), 4 deletions(-)

(limited to 'ecomp-sdk/epsdk-fw/pom.xml')

diff --git a/ecomp-sdk/epsdk-fw/pom.xml b/ecomp-sdk/epsdk-fw/pom.xml
index 2eb62648..9f2929b5 100644
--- a/ecomp-sdk/epsdk-fw/pom.xml
+++ b/ecomp-sdk/epsdk-fw/pom.xml
@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>org.onap.portal.sdk</groupId>
 		<artifactId>epsdk-project</artifactId>
-		<version>2.1.0</version>
+		<version>2.1.1</version>
 	</parent>
 
 	<!-- GroupId is inherited from parent -->
@@ -75,12 +75,12 @@
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-annotations</artifactId>
-			<version>2.6.3</version>
+			<version>2.8.10</version>
 		</dependency>
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-databind</artifactId>
-			<version>2.6.3</version>
+			<version>2.8.10</version>
 		</dependency>
 		<dependency>
 			<groupId>org.owasp.esapi</groupId>
@@ -91,6 +91,22 @@
 					<groupId>log4j</groupId>
 					<artifactId>log4j</artifactId>
 				</exclusion>
+				<exclusion>
+        			<groupId>xerces</groupId>
+            		<artifactId>xercesImpl</artifactId>
+				</exclusion>
+				<exclusion>
+        			<groupId>xalan</groupId>
+            		<artifactId>xalan</artifactId>
+				</exclusion>
+				<exclusion>
+        			<groupId>commons-beanutils</groupId>
+            		<artifactId>commons-beanutils</artifactId>
+				</exclusion>
+				<exclusion>
+        			<groupId>commons-httpclient</groupId>
+            		<artifactId>commons-httpclient</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<dependency>
@@ -115,7 +131,7 @@
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-classic</artifactId>
-			<version>1.1.1</version>
+			<version>1.2.3</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
@@ -123,6 +139,12 @@
 			<artifactId>resteasy-spring</artifactId>
 			<version>${resteasy.version}</version>
 			<scope>test</scope>
+			<exclusions>
+				<exclusion>
+					<groupId>org.apache.httpcomponents</groupId>
+					<artifactId>httpclient</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>org.jboss.resteasy</groupId>
@@ -160,6 +182,16 @@
 		    <classifier>runtime</classifier>
 		    <scope>test</scope>
 		    <version>${jacoco.version}</version>
+		</dependency>
+				<dependency>
+			<groupId>commons-fileupload</groupId>
+			<artifactId>commons-fileupload</artifactId>
+			<version>1.3.3</version>
+		</dependency>
+		<dependency>
+    		<groupId>commons-beanutils</groupId>
+    		<artifactId>commons-beanutils</artifactId>
+    		<version>1.9.3</version>
 		</dependency>
 	</dependencies>
 
-- 
cgit 1.2.3-korg