X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=BRMSGateway%2Fpom.xml;h=0d9ebfba2250971063c44d45af0f337242831ba3;hb=d6465d56ca959b8493c1a9a3938d3d24461b5a6b;hp=6f530b376b36b58d9ae5b3128bf1c411c41a852f;hpb=367fd935789c6c2e13b9b32d13c62dbac89e1c57;p=policy%2Fengine.git

diff --git a/BRMSGateway/pom.xml b/BRMSGateway/pom.xml
index 6f530b376..0d9ebfba2 100644
--- a/BRMSGateway/pom.xml
+++ b/BRMSGateway/pom.xml
@@ -2,7 +2,7 @@
   ============LICENSE_START=======================================================
   ONAP Policy Engine
   ================================================================================
-  Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
+  Copyright (C) 2017-2018 AT&T Intellectual Property. All rights reserved.
   ================================================================================
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -29,6 +29,11 @@
 	<artifactId>BRMSGateway</artifactId>
 	<description>This application will take in BRMS rules and acts as interface between PR and PDP XACML</description>
 	<dependencies>
+		<dependency>
+			<groupId>com.h2database</groupId>
+			<artifactId>h2</artifactId>
+			<scope>test</scope>
+		</dependency>
 		<dependency>
 			<groupId>org.onap.policy.engine</groupId>
 			<artifactId>PolicyEngineAPI</artifactId>
@@ -49,27 +54,43 @@
 		<dependency>
 			<groupId>org.apache.maven</groupId>
 			<artifactId>maven-model</artifactId>
-			<version>2.2.1</version>
+			<version>3.3.9</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.maven.shared</groupId>
 			<artifactId>maven-invoker</artifactId>
-			<version>2.2</version>
+			<version>3.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.onap.policy.common</groupId>
 			<artifactId>integrity-monitor</artifactId>
 			<version>${project.version}</version>
 		</dependency>
+		<!--
+		CLM security fix - force use of commons-collections 3.2.2.
+		Remove this if a new version of nexus-rest-client-java is upgraded
+		to not use velocity (and then subsequently commons-collections v3.1 
+		 -->
+		<dependency>
+		    <groupId>commons-collections</groupId>
+		    <artifactId>commons-collections</artifactId>
+		    <version>3.2.2</version>
+		</dependency>
 		<dependency>
 			<groupId>org.sonatype.nexus</groupId>
 			<artifactId>nexus-rest-client-java</artifactId>
-			<version>2.3.1</version>
+			<version>2.3.1-01</version>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-collections</groupId>
+					<artifactId>commons-collections</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>com.thoughtworks.xstream</groupId>
 			<artifactId>xstream</artifactId>
-			<version>1.3.1</version>
+			<version>1.4.10</version>
 		</dependency>
 		<dependency>
 			<groupId>com.att.nsa</groupId>
@@ -100,7 +121,7 @@
 		<dependency>
 			<groupId>org.apache.httpcomponents</groupId>
 			<artifactId>httpclient</artifactId>
-			<version>4.5.2</version>
+			<version>${httpclient.version}</version>
 		</dependency>
 	</dependencies>
 	<build>