Remove logback 1.1.3 security issue

[appc.git] / appc-config / appc-data-services / provider / pom.xml

diff --git a/appc-config/appc-data-services/provider/pom.xml b/appc-config/appc-data-services/provider/pom.xml
index 92468db..0b5676e 100644 (file)
--- a/appc-config/appc-data-services/provider/pom.xml
+++ b/appc-config/appc-data-services/provider/pom.xml
@@ -62,10 +62,21 @@
                        <groupId>commons-io</groupId>
                        <artifactId>commons-io</artifactId>
                </dependency>
+                <dependency>
+                     <groupId>ch.qos.logback</groupId>
+                     <artifactId>logback-classic</artifactId>
+                    <version>${logback.version}</version>
+                </dependency>
 
                <dependency>
                        <groupId>com.att.eelf</groupId>
                        <artifactId>eelf-core</artifactId>
+                       <exclusions>
+                            <exclusion>
+                                 <groupId>ch.qos.logback</groupId>
+                                 <artifactId>logback-classic</artifactId>
+                            </exclusion>
+                        </exclusions>
                </dependency>
 
                <dependency>
@@ -138,7 +149,8 @@
                                                <Bundle-SymbolicName>appc-config-data-services</Bundle-SymbolicName>
                                                <Bundle-Activator>org.onap.appc.data.services.AppcDataServiceActivator</Bundle-Activator>
                                                <Export-Package>org.onap.appc.data.services</Export-Package>
-                                               <Import-Package>*</Import-Package>
+                                               <Import-Package>groovy.lang;resolution:=optional,
+                                                   org.codehaus.groovy.*;resolution:=optional,*</Import-Package>
                                                <Embed-Dependency>eelf-core,logback-core,logback-classic</Embed-Dependency>
                                                <DynamicImport-Package>*</DynamicImport-Package>
                                        </instructions>