From 81bef4855130b5d9134f3ff98cec7c9d5d38c3d5 Mon Sep 17 00:00:00 2001
From: Victor Gao <victor.gao@huawei.com>
Date: Thu, 15 Nov 2018 16:23:42 +0800
Subject: Fix vulnerability issue in resmgr

update commons-collections version to 3.2.2

Change-Id: I855d36d0b409ab77992d042037c837806dcafb15
Issue-ID: VFC-1187
Signed-off-by: Victor Gao <victor.gao@huawei.com>
---
 ResmanagementService/service/pom.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'ResmanagementService')

diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml
index 7571b8f..f2be7dd 100644
--- a/ResmanagementService/service/pom.xml
+++ b/ResmanagementService/service/pom.xml
@@ -72,11 +72,22 @@
             <artifactId>com.springsource.org.apache.commons.codec</artifactId>
             <version>1.3.0</version>
         </dependency>
+        <dependency>
+            <groupId>commons-collections</groupId>
+            <artifactId>commons-collections</artifactId>
+            <version>3.2.2</version>
+        </dependency>
         <dependency>
             <groupId>net.sf.json-lib</groupId>
             <artifactId>json-lib</artifactId>
             <version>2.4</version>
             <classifier>jdk15</classifier>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-collections</groupId>
+                    <artifactId>commons-collections</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.eclipse.jetty.orbit</groupId>
-- 
cgit 1.2.3-korg