Remove plexus utils vul'y from XML event plugin 53/55053/1
authorliamfallon <liam.fallon@ericsson.com>
Tue, 19 Jun 2018 06:53:02 +0000 (14:53 +0800)
committerliamfallon <liam.fallon@ericsson.com>
Tue, 19 Jun 2018 06:53:36 +0000 (14:53 +0800)
The plexus-utils dependency on JAXB on the XML event plugin has
security vulnerabilities. It is excluded as a dependency.

Change-Id: I84f3bbea221374e0e245ef427aac3ec1ba64f48f
Issue-ID: POLICY-905
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml

index fd2be45..0e5e57d 100644 (file)
         <dependency>
             <groupId>org.jvnet.jaxb2.maven2</groupId>
             <artifactId>maven-jaxb2-plugin</artifactId>
-            <version>0.13.2</version>
+            <version>0.14.0</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.codehaus.plexus</groupId>
+                    <artifactId>plexus-utils</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.jvnet.jaxb2_commons</groupId>