From 636c993f04cbc3e52d40fd5c4c7126772d074179 Mon Sep 17 00:00:00 2001
From: Michael Lando <ml636r@att.com>
Date: Tue, 22 May 2018 18:26:11 +0300
Subject: update onboarding spring

as requested for security purposes upgrading spring to 4.3.15.RELEASE

Change-Id: Ia2fd120860384291a38272bea5331467a395984f
Issue-ID: SDC-1323
Signed-off-by: Michael Lando <ml636r@att.com>
---
 onboarding/pom.xml                                                      | 2 +-
 openecomp-be/api/openecomp-sdc-rest-webapp/notifications-fe/pom.xml     | 1 -
 .../openecomp-sdc-notification-websocket/pom.xml                        | 2 +-
 .../openecomp-sdc-notification-worker/pom.xml                           | 2 +-
 services/activity-spec/pom.xml                                          | 2 +-
 5 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/onboarding/pom.xml b/onboarding/pom.xml
index 21a4d8244e..1987f19be3 100644
--- a/onboarding/pom.xml
+++ b/onboarding/pom.xml
@@ -100,7 +100,7 @@
         <servlet.version>2.5</servlet.version>
         <slf4j.version>1.7.21</slf4j.version>
         <snakeyaml.version>1.17</snakeyaml.version>
-        <spring.framework.version>4.3.4.RELEASE</spring.framework.version> <!-- orignal 4.0.7.RELEASE 4.1.3.RELEASE-->
+        <spring.framework.version>4.3.15.RELEASE</spring.framework.version> <!-- orignal 4.0.7.RELEASE 4.1.3.RELEASE-->
         <swagger.version>1.5.3</swagger.version>
         <testng.version>6.9.10</testng.version> <!--new 6.9.13.6 still shows blackduck risk -->
         <woodstox.version>4.4.1</woodstox.version>
diff --git a/openecomp-be/api/openecomp-sdc-rest-webapp/notifications-fe/pom.xml b/openecomp-be/api/openecomp-sdc-rest-webapp/notifications-fe/pom.xml
index b716f98df8..9bf2a7346d 100644
--- a/openecomp-be/api/openecomp-sdc-rest-webapp/notifications-fe/pom.xml
+++ b/openecomp-be/api/openecomp-sdc-rest-webapp/notifications-fe/pom.xml
@@ -16,7 +16,6 @@
     </parent>
 
     <properties>
-        <spring.version>4.3.4.RELEASE</spring.version>
         <jetty.version>9.3.6.v20151106</jetty.version>
     </properties>
 
diff --git a/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-websocket/pom.xml b/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-websocket/pom.xml
index abff87f1ad..5a7012d1fc 100644
--- a/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-websocket/pom.xml
+++ b/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-websocket/pom.xml
@@ -22,7 +22,7 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-websocket</artifactId>
-            <version>4.3.4.RELEASE</version>
+            <version>${spring.framework.version}</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
diff --git a/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-worker/pom.xml b/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-worker/pom.xml
index eccc5731d9..d90b6e018d 100644
--- a/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-worker/pom.xml
+++ b/openecomp-be/lib/openecomp-sdc-notification-lib/openecomp-sdc-notification-worker/pom.xml
@@ -32,7 +32,7 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-websocket</artifactId>
-            <version>4.3.4.RELEASE</version>
+            <version>${spring.framework.version}</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
diff --git a/services/activity-spec/pom.xml b/services/activity-spec/pom.xml
index 2b574000cd..f3c3b09dc2 100644
--- a/services/activity-spec/pom.xml
+++ b/services/activity-spec/pom.xml
@@ -34,7 +34,7 @@
         <mvn.docker.version>0.23.0</mvn.docker.version>
 
         <mockito.all.version>1.10.19</mockito.all.version>
-        <spring.framework.version>4.1.3.RELEASE</spring.framework.version>
+        <spring.framework.version>4.3.15.RELEASE</spring.framework.version>
         <cxf.version>3.1.8</cxf.version>
         <ws.rs.version>2.0.1</ws.rs.version>
         <javax.inject.version>1</javax.inject.version>
-- 
cgit 1.2.3-korg