Fix security issues

[vid.git] / vid-app-common / pom.xml

diff --git a/vid-app-common/pom.xml b/vid-app-common/pom.xml
index 4a80f0b..7a48522 100755 (executable)
--- a/vid-app-common/pom.xml
+++ b/vid-app-common/pom.xml
@@ -19,7 +19,7 @@
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>\r
                <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>\r
                <epsdk.version>2.1.0</epsdk.version>\r
-               <springframework.version>4.2.0.RELEASE</springframework.version>\r
+               <springframework.version>4.2.9.RELEASE</springframework.version>\r
                <hibernate.version>4.3.11.Final</hibernate.version>\r
                <!-- Skip assembling the zip by default -->\r
                <skipassembly>true</skipassembly>\r
@@ -287,6 +287,16 @@
                        <artifactId>eelf-core</artifactId>\r
                        <version>1.0.0</version>\r
                </dependency>\r
+               <dependency>\r
+                       <groupId>ch.qos.logback</groupId>\r
+                       <artifactId>logback-core</artifactId>\r
+                       <version>1.2.3</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>ch.qos.logback</groupId>\r
+                       <artifactId>logback-classic</artifactId>\r
+                       <version>1.2.3</version>\r
+               </dependency>\r
 \r
                <!-- Mapper -->\r
                <dependency>\r
@@ -297,12 +307,12 @@
                <dependency>\r
                        <groupId>com.fasterxml.jackson.core</groupId>\r
                        <artifactId>jackson-core</artifactId>\r
-                       <version>2.6.3</version>\r
+                       <version>2.8.6</version>\r
                </dependency>\r
                <dependency>\r
                        <groupId>com.fasterxml.jackson.core</groupId>\r
                        <artifactId>jackson-databind</artifactId>\r
-                       <version>2.6.3</version>\r
+                       <version>2.6.7.1</version>\r
                </dependency>\r
                <dependency>\r
                        <groupId>org.codehaus.jackson</groupId>\r
@@ -461,7 +471,7 @@
                <dependency>\r
                    <groupId>org.onap.sdc.sdc-tosca</groupId>\r
                    <artifactId>sdc-tosca</artifactId>\r
-                   <version>1.3.1</version>\r
+                   <version>1.3.0</version>\r
                    <scope>compile</scope>\r
                </dependency>\r
                <dependency>\r