From e332e721e917d688e9038c4c0e83f48b3b51c628 Mon Sep 17 00:00:00 2001
From: liangxuning <liangxuning@boco.com.cn>
Date: Thu, 20 Sep 2018 17:01:40 +0800
Subject: security problem

Change-Id: I76bb3a94dcdcca45166633a0105e35478782430a
Issue-ID: VFC-788
Signed-off-by: liangxuning<liangxuning@boco.com.cn>
	modified:   ems/boco/pom.xml
---
 ems/boco/pom.xml | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/ems/boco/pom.xml b/ems/boco/pom.xml
index f2c3bed..2eb5481 100644
--- a/ems/boco/pom.xml
+++ b/ems/boco/pom.xml
@@ -151,7 +151,7 @@
 	<dependency>
 		<groupId>org.springframework</groupId>
 		<artifactId>spring-context</artifactId>
-		<version>4.3.6.RELEASE</version>
+		<version>4.3.18.RELEASE</version>
 	</dependency>
     <dependency>
 		<groupId>org.quartz-scheduler</groupId>
@@ -278,7 +278,7 @@
   	<dependency>
 	    <groupId>org.eclipse.jetty</groupId>
 	    <artifactId>jetty-server</artifactId>
-	    <version>9.4.8.v20171121</version>
+	    <version>9.4.11.v20180605</version>
 	</dependency>
 	<dependency>
 	    <groupId>commons-collections</groupId>
@@ -293,12 +293,12 @@
 	<dependency>
 	    <groupId>org.bouncycastle</groupId>
 	    <artifactId>bcprov-jdk15on</artifactId>
-	    <version>1.59</version>
+	    <version>1.60</version>
 	</dependency>
 	<dependency>
 	    <groupId>xerces</groupId>
 	    <artifactId>xercesImpl</artifactId>
-	    <version>2.11.0.SP5</version>
+	    <version>2.12.0</version>
 	</dependency>
 	<dependency>
 	    <groupId>com.googlecode.libphonenumber</groupId>
@@ -308,12 +308,22 @@
 	<dependency>
 	    <groupId>org.eclipse.jetty</groupId>
 	    <artifactId>jetty-util</artifactId>
-	    <version>9.4.8.v20171121</version>
+	    <version>9.4.11.v20180605</version>
 	</dependency>
 	<dependency>
 		<groupId>com.google.guava</groupId>
 	    <artifactId>guava</artifactId>
-
+		<version>23.6.1-jre</version>
+	</dependency>
+	<dependency>
+	    <groupId>com.fasterxml.jackson.dataformat</groupId>
+	    <artifactId>jackson-dataformat-xml</artifactId>
+	    <version>2.9.4</version>
+	</dependency>
+	<dependency>
+	    <groupId>com.fasterxml.jackson.core</groupId>
+	    <artifactId>jackson-databind</artifactId>
+	    <version>2.9.6</version>
 	</dependency>
   </dependencies>
 </project>
-- 
cgit 1.2.3-korg