Fix sonar security reportings

Fix cxf and jackson direct sdk library
dependency issues.

Change-Id: I73344591574da8cb04fcea1e3d78b4b756b32160
Issue-ID: VNFSDK-212
Signed-off-by: Avinash S <avinash.s@huawei.com>

diff --git a/vnfmarket-be/vnf-sdk-marketplace/pom.xml b/vnfmarket-be/vnf-sdk-marketplace/pom.xml
index 50bc8a5..3a11ac6 100644 (file)
--- a/vnfmarket-be/vnf-sdk-marketplace/pom.xml
+++ b/vnfmarket-be/vnf-sdk-marketplace/pom.xml
@@ -22,7 +22,7 @@
 
        <properties>
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-               <cxf.version>3.1.6</cxf.version>
+               <cxf.version>3.1.9</cxf.version>
                <!-- slf4j.version>1.6.1</slf4j.version> -->
                <maven.test.skip>false</maven.test.skip>
                <maven.test.failure.ignore>false</maven.test.failure.ignore>
@@ -167,12 +167,12 @@
                <dependency>
                        <groupId>org.codehaus.jackson</groupId>
                        <artifactId>jackson-jaxrs</artifactId>
-                       <version>1.9.2</version>
+                       <version>1.9.13</version>
                </dependency>
                <dependency>
                        <groupId>org.codehaus.jackson</groupId>
                        <artifactId>jackson-mapper-asl</artifactId>
-                       <version>1.9.2</version>
+                       <version>1.9.13</version>
                </dependency>
                <dependency>
                        <groupId>net.sf.json-lib</groupId>