X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=ONAP-SDK-APP%2Fpom.xml;h=687e5b3a2720c0df65735277ee93de4cfb592da9;hb=d6465d56ca959b8493c1a9a3938d3d24461b5a6b;hp=67f810e125a252ac5c2c7be6a1dccf33941f4918;hpb=c9039d15e8a84a9304fba40283a332a2a65ef854;p=policy%2Fengine.git

diff --git a/ONAP-SDK-APP/pom.xml b/ONAP-SDK-APP/pom.xml
index 67f810e12..687e5b3a2 100644
--- a/ONAP-SDK-APP/pom.xml
+++ b/ONAP-SDK-APP/pom.xml
@@ -30,7 +30,7 @@
 
 	<properties>
 		<encoding>UTF-8</encoding>
-		<epsdk.version>2.1.0-SNAPSHOT</epsdk.version>
+		<epsdk.version>2.1.0</epsdk.version>
 		<springframework.version>4.2.0.RELEASE</springframework.version>
 		<hibernate.version>4.3.11.Final</hibernate.version>
 		<!-- Skip assembling the zip; assemble via mvn -Dskipassembly=false .. -->
@@ -238,6 +238,16 @@
 			<type>jar</type>
 		</dependency>
 		<!-- SDK components -->
+		<!--
+		CLM security fix - force use of commons-collections 3.2.2.
+		Remove this if a new version of epsdk-core is upgraded
+		to not use esapi (and then subsequently commons-collections v3.2
+		 -->
+		<dependency>
+		    <groupId>commons-collections</groupId>
+		    <artifactId>commons-collections</artifactId>
+		    <version>3.2.2</version>
+		</dependency>
 		<dependency>
 			<groupId>org.onap.portal.sdk</groupId>
 			<artifactId>epsdk-core</artifactId>
@@ -247,6 +257,10 @@
 					<groupId>mysql</groupId>
 					<artifactId>mysql-connector-java</artifactId>
 				</exclusion>
+				<exclusion>
+					<groupId>commons-collections</groupId>
+					<artifactId>commons-collections</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<dependency>