diff options
| author |   Victor Gao <victor.gao@huawei.com> | 2018-11-15 15:44:17 +0800 |
|---|---|---|
| committer |   Yan Yang <yangyanyj@chinamobile.com> | 2018-11-15 11:20:52 +0000 |
| commit | 91958f3b09ac4883d393d9cfb04ddcb0baa1d134 (patch) | |
| tree | b1ac2d0cc3694449ccd383304ecffcfb05f3bcb3 /ResmanagementService/service/pom.xml | |
| parent | 24682fda345a40769d693dc8981754df0f8bc191 (diff) | |
Fix vulnerability issue in resmgr
upgrade springframework from 3.x to 4.x
CVE-2016-6812
CVE-2018-1270
CVE-2018-11039
SONATYPE-2015-0002
CVE-2014-3578
CVE-2018-1257
CVE-2017-12624
CVE-2018-8039
Change-Id: I59014c277df9bf201bb672a108a82a2deb0ed95b
Issue-ID: VFC-1187
Signed-off-by: Victor Gao <victor.gao@huawei.com>
(cherry picked from commit ea18924cd5505f5e36ea58e7424db54c41db4605)
Diffstat (limited to 'ResmanagementService/service/pom.xml')
| -rw-r--r-- | ResmanagementService/service/pom.xml | 35 |
1 files changed, 23 insertions, 12 deletions
diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml index 3e043b7..7571b8f 100644 --- a/ResmanagementService/service/pom.xml +++ b/ResmanagementService/service/pom.xml @@ -104,7 +104,7 @@ <dependency> <groupId>org.springframework</groupId> <artifactId>spring-tx</artifactId> - <version>3.1.0.RELEASE</version> + <version>3.1.2.RELEASE</version> </dependency> <dependency> <groupId>org.mybatis</groupId> @@ -151,53 +151,64 @@ <dependency> <groupId>org.springframework</groupId> <artifactId>spring-core</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-aop</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-beans</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-context</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-jdbc</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-web</artifactId> <version>3.2.14.RELEASE</version> </dependency> - <dependency> + <!--dependency> <groupId>org.springframework</groupId> <artifactId>spring-asm</artifactId> - <version>3.1.0.RELEASE</version> - </dependency> + <version>4.3.18.RELEASE</version> + </dependency--> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-expression</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-test</artifactId> - <version>3.1.0.RELEASE</version> + <version>4.3.18.RELEASE</version> </dependency> <dependency> <groupId>org.apache.cxf</groupId> + <artifactId>cxf-rt-transports-http</artifactId> + <version>3.1.17</version> + </dependency> + <dependency> + <groupId>org.apache.cxf</groupId> <artifactId>cxf-rt-frontend-jaxrs</artifactId> - <version>3.1.6</version> + <version>3.1.17</version> + <exclusions> + <exclusion> + <groupId>org.apache.cxf</groupId> + <artifactId>cxf-rt-transports-http</artifactId> + </exclusion> + </exclusions> </dependency> <!-- UT coverage dependency start --> <dependency> |