From 785fab55d51fb1c824398accb1aab53fc7049861 Mon Sep 17 00:00:00 2001
From: "Sangalang, Felix" <felix.sangalang@att.com>
Date: Fri, 21 Jun 2019 10:46:38 -0400
Subject: Security updates for maven dependencies

Update commons-collections version to 3.2.2.
Updated distribution client version to 1.4.0.
Update commons-fileupload to version 1.4.
Update commons-codec to version 1.12.

Change-Id: I4ab794e3aef7300c30088e5197092fd30231c4af
Issue-ID: SO-2043
Signed-off-by: Benjamin, Max (mb388a) <mb388a@us.att.com>
---
 adapters/mso-openstack-adapters/pom.xml | 2 +-
 asdc-controller/pom.xml                 | 2 +-
 bpmn/MSOCoreBPMN/pom.xml                | 2 +-
 bpmn/mso-infrastructure-bpmn/pom.xml    | 4 ++++
 pom.xml                                 | 2 +-
 5 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/adapters/mso-openstack-adapters/pom.xml b/adapters/mso-openstack-adapters/pom.xml
index 922716425b..7ffcd8308c 100644
--- a/adapters/mso-openstack-adapters/pom.xml
+++ b/adapters/mso-openstack-adapters/pom.xml
@@ -254,7 +254,7 @@
     <dependency>
       <groupId>commons-collections</groupId>
       <artifactId>commons-collections</artifactId>
-      <version>3.2.1</version>
+      <version>3.2.2</version>
     </dependency>
 
     <dependency>
diff --git a/asdc-controller/pom.xml b/asdc-controller/pom.xml
index 60c517d944..a839111eb2 100644
--- a/asdc-controller/pom.xml
+++ b/asdc-controller/pom.xml
@@ -202,7 +202,7 @@
     <dependency>
       <groupId>org.onap.sdc.sdc-distribution-client</groupId>
       <artifactId>sdc-distribution-client</artifactId>
-      <version>1.3.0</version>
+      <version>1.4.0</version>
       <exclusions>
         <exclusion>
           <groupId>org.slf4j</groupId>
diff --git a/bpmn/MSOCoreBPMN/pom.xml b/bpmn/MSOCoreBPMN/pom.xml
index 12bc9980bf..fd239562e2 100644
--- a/bpmn/MSOCoreBPMN/pom.xml
+++ b/bpmn/MSOCoreBPMN/pom.xml
@@ -54,7 +54,7 @@
     <dependency>
       <groupId>commons-fileupload</groupId>
       <artifactId>commons-fileupload</artifactId>
-      <version>1.3.3</version>
+      <version>1.4</version>
     </dependency>
     <dependency>
       <groupId>javax.servlet</groupId>
diff --git a/bpmn/mso-infrastructure-bpmn/pom.xml b/bpmn/mso-infrastructure-bpmn/pom.xml
index e9ed15aa0f..ea1a205317 100644
--- a/bpmn/mso-infrastructure-bpmn/pom.xml
+++ b/bpmn/mso-infrastructure-bpmn/pom.xml
@@ -157,6 +157,10 @@
           <groupId>org.camunda.bpmn</groupId>
           <artifactId>camunda-engine-rest-core</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>commons-fileupload</groupId>
+          <artifactId>commons-fileupload</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>
diff --git a/pom.xml b/pom.xml
index cd944781ff..58f8afa261 100644
--- a/pom.xml
+++ b/pom.xml
@@ -791,7 +791,7 @@
       <dependency>
         <groupId>commons-codec</groupId>
         <artifactId>commons-codec</artifactId>
-        <version>1.10</version>
+        <version>1.12</version>
         <scope>compile</scope>
       </dependency>
       <dependency>
-- 
cgit 1.2.3-korg