Fix security vulnerabilities

Issue-ID: DCAEGEN2-2810
Signed-off-by: denilson.l65 <denilson.l65@wipro.com>
Change-Id: I6f301afc091f5fc545d5ae5fd0ba46bd20cd5cd4

diff --git a/components/kpi-computation-ms/pom.xml b/components/kpi-computation-ms/pom.xml
index e9e315e..d8e8f4d 100644 (file)
--- a/components/kpi-computation-ms/pom.xml
+++ b/components/kpi-computation-ms/pom.xml
@@ -2,6 +2,7 @@
 <!--
   ~ ============LICENSE_START=======================================================
   ~ Copyright (c) 2021 China Mobile. All rights reserved.
+  ~ Copyright (c) 2021 Wipro Limited.
   ~ ================================================================================ 
   ~ Licensed under the Apache License, Version 2.0 (the "License");
   ~ you may not use this file except in compliance with the License.
@@ -28,7 +29,7 @@
 
     <groupId>org.onap.dcaegen2.services.components</groupId>
     <artifactId>kpi-ms</artifactId>
-    <version>1.0.0-SNAPSHOT</version>
+    <version>1.0.1-SNAPSHOT</version>
     <name>dcaegen2-services-kpi-computation-ms</name>
     <description>Kpi ms</description>
     <packaging>jar</packaging>
@@ -50,11 +51,11 @@
             ${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml
         </sonar.coverage.jacoco.xmlReportPaths>
         <lombok.version>1.18.4</lombok.version>
-        <undertow.version>2.0.30.Final</undertow.version>
+        <undertow.version>2.2.8.Final</undertow.version>
         <xml.version>2.3.1</xml.version>
         <jaxb.version>2.3.0.1</jaxb.version>
         <docker.repository>nexus3.onap.org:10003</docker.repository>
-        <spring.version>5.2.7.RELEASE</spring.version>
+        <spring.version>5.3.7</spring.version>
         <junit.version>5.3.2</junit.version>
         <mockito.version>2.23.4</mockito.version>
         <mockito-ju5-ext.version>2.23.4</mockito-ju5-ext.version>
@@ -72,37 +73,37 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-webmvc</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-core</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-beans</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-expression</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
             </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-web</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
             <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
-            <version>5.2.7.RELEASE</version>
+            <version>${spring.version}</version>
         </dependency>
         <!-- cbs client -->
         <dependency>
@@ -170,13 +171,13 @@
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient</artifactId>
-            <version>4.5.7</version>
+            <version>4.5.13</version>
         </dependency>
 
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
             <artifactId>jetty-server</artifactId>
-            <version>9.4.17.v20190418</version>
+            <version>9.4.41.v20210516</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>

diff --git a/components/kpi-computation-ms/version.properties b/components/kpi-computation-ms/version.properties
index be08607..a631149 100644 (file)
--- a/components/kpi-computation-ms/version.properties
+++ b/components/kpi-computation-ms/version.properties
@@ -20,7 +20,7 @@
 ###############################################################################
 major=1
 minor=0
-patch=0
+patch=1
 base_version=${major}.${minor}.${patch}
 release_version=${base_version}
 snapshot_version=${base_version}-SNAPSHOT