fix security vilation SONATYPE-2015-0002

Change-Id: Ib526b8dfc3e7be9a2fc5d8ddfc3e32d2f0e4852f
Issue-ID: SDC-1717
Signed-off-by: Tal Gitelman <tg851x@intl.att.com>

diff --git a/asdctool/pom.xml b/asdctool/pom.xml
index 010edce..e1feb7f 100644 (file)
--- a/asdctool/pom.xml
+++ b/asdctool/pom.xml
@@ -218,6 +218,12 @@
                        <artifactId>commons-configuration</artifactId>
                        <version>1.6</version>
                        <scope>compile</scope>
+                       <exclusions>
+                               <exclusion>
+                                       <artifactId>commons-collections</artifactId>
+                                       <groupId>commons-collections</groupId>
+                               </exclusion>
+                       </exclusions>
                </dependency>
 
                <!-- TITAN -->
@@ -235,6 +241,10 @@
                                        <groupId>org.slf4j</groupId>
                                        <artifactId>slf4j-log4j12</artifactId>
                                </exclusion>
+                               <exclusion>
+                                       <artifactId>commons-collections</artifactId>
+                                       <groupId>commons-collections</groupId>
+                               </exclusion>
                        </exclusions>
                </dependency>
 

diff --git a/catalog-be/pom.xml b/catalog-be/pom.xml
index f0113df..a375c6a 100644 (file)
--- a/catalog-be/pom.xml
+++ b/catalog-be/pom.xml
@@ -323,6 +323,10 @@
                     <artifactId>slf4j-log4j12</artifactId>
                     <groupId>org.slf4j</groupId>
                 </exclusion>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/catalog-dao/pom.xml b/catalog-dao/pom.xml
index c15a585..2a2e02a 100644 (file)
--- a/catalog-dao/pom.xml
+++ b/catalog-dao/pom.xml
@@ -252,6 +252,10 @@ Modifications copyright (c) 2018 Nokia
                                        <artifactId>slf4j-log4j12</artifactId>
                                        <groupId>org.slf4j</groupId>
                                </exclusion>
+                               <exclusion>
+                                       <artifactId>commons-collections</artifactId>
+                                       <groupId>commons-collections</groupId>
+                               </exclusion>
                        </exclusions>
                </dependency>
 

diff --git a/catalog-model/pom.xml b/catalog-model/pom.xml
index 0a6c7cc..ed35276 100644 (file)
--- a/catalog-model/pom.xml
+++ b/catalog-model/pom.xml
@@ -114,6 +114,10 @@
                                        <artifactId>slf4j-log4j12</artifactId>
                                        <groupId>org.slf4j</groupId>
                                </exclusion>
+                               <exclusion>
+                                       <artifactId>commons-collections</artifactId>
+                                       <groupId>commons-collections</groupId>
+                               </exclusion>
                        </exclusions>
                </dependency>
 

diff --git a/common-app-api/pom.xml b/common-app-api/pom.xml
index 4b58258..3b6731f 100644 (file)
--- a/common-app-api/pom.xml
+++ b/common-app-api/pom.xml
@@ -189,8 +189,20 @@
                        <groupId>commons-validator</groupId>
                        <artifactId>commons-validator</artifactId>
                        <version>1.6</version>
+                       <exclusions>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
+            </exclusions>
                </dependency>
 
+        <dependency>
+            <artifactId>commons-collections</artifactId>
+            <groupId>commons-collections</groupId>
+            <version>3.2.2</version>
+        </dependency>
+
                <dependency>
                        <groupId>org.codehaus.jettison</groupId>
                        <artifactId>jettison</artifactId>

diff --git a/test-apis-ci/pom.xml b/test-apis-ci/pom.xml
index 14d6611..5fd06ec 100644 (file)
--- a/test-apis-ci/pom.xml
+++ b/test-apis-ci/pom.xml
@@ -235,6 +235,10 @@
                     <artifactId>slf4j-log4j12</artifactId>
                     <groupId>org.slf4j</groupId>
                 </exclusion>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
             </exclusions>
         </dependency>
 
@@ -335,6 +339,12 @@
             <artifactId>mockserver-netty</artifactId>
             <version>3.10.4</version>
             <scope>test</scope>
+            <exclusions>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
+            </exclusions>
         </dependency>
 
         <dependency>