From 6c3be10d1b1ca904cc1817ca569ac6b05452fcc1 Mon Sep 17 00:00:00 2001
From: "prakash.e" <prakash.e@huawei.com>
Date: Thu, 5 Mar 2020 21:51:03 +0530
Subject: vfc resmanagement jackson vulnerability fix

Excluded jackson-mapper-asl in jackson-databind artifact

Change-Id: If03082ad06d039e411b09df48265c1d02ca87de8
Issue-ID: VFC-1598
Signed-off-by: Prakash.E <prakash.e@huawei.com>
---
 ResmanagementService/service/pom.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml
index 0337897..1d81499 100644
--- a/ResmanagementService/service/pom.xml
+++ b/ResmanagementService/service/pom.xml
@@ -39,6 +39,22 @@
             <groupId>org.codehaus.jackson</groupId>
             <artifactId>jackson-jaxrs</artifactId>
             <version>1.9.13</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.codehaus.jackson</groupId>
+                    <artifactId>jackson-mapper-asl</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.10.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.10.0</version>
         </dependency>
         <!-- security
         <dependency>
-- 
cgit 1.2.3-korg