Update some dependencies

Update versions of some dependencies as reported by Nexus IQ

Issue-ID: CLAMP-135
Change-Id: I79b6e7f464032630f5d07c4d00999a38da50d2a6
Signed-off-by: Determe, Sebastien (sd378r) <sd378r@intl.att.com>

diff --git a/pom.xml b/pom.xml
index 5663d98..2f1a7d2 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -251,7 +251,7 @@
                                <dependency>
                                                <groupId>org.apache.commons</groupId>
                                                <artifactId>commons-vfs2</artifactId>
-                                               <version>2.0</version>
+                                               <version>2.2</version>
                                </dependency>
                                <dependency>
                                                <groupId>joda-time</groupId>
@@ -293,11 +293,6 @@
                                                <artifactId>hibernate-annotations</artifactId>
                                                <version>3.5.6-Final</version>
                                </dependency>
-                               <!-- <dependency> -->
-                               <!-- <groupId>org.apache.geronimo.specs</groupId> -->
-                               <!-- <artifactId>geronimo-jpa_2.0_spec</artifactId> -->
-                               <!-- <version>1.1</version> -->
-                               <!-- </dependency> -->
                                <dependency>
                                                <groupId>dom4j</groupId>
                                                <artifactId>dom4j</artifactId>
@@ -464,6 +459,22 @@
                                                <artifactId>jsf-impl</artifactId>
                                                <version>2.1.7</version>
                                </dependency>
+                               <!-- Other dependencies to fix nexus IQ reported vulnerabilities -->
+                               <dependency>
+                                       <groupId>org.codehaus.plexus</groupId>
+                                       <artifactId>plexus-utils</artifactId>
+                                       <version>3.0.24</version>
+                               </dependency>
+                               <dependency>
+                                       <groupId>commons-fileupload</groupId>
+                                       <artifactId>commons-fileupload</artifactId>
+                                       <version>1.3.3</version>
+                               </dependency>
+                               <dependency>
+                                       <groupId>org.jboss.spec.javax.ws.rs</groupId>
+                                       <artifactId>jboss-jaxrs-api_2.0_spec</artifactId>
+                                       <version>1.0.1.Final</version>
+                               </dependency>
                                <!-- Remove the MYSQL connector and replace it by Mariadb -->
                                <dependency>
                                                <groupId>org.mariadb.jdbc</groupId>