Fix security issues

Change-Id: I1b90314dab4f745495d8251520b62297571cc56f
Issue-ID: VID-149
Signed-off-by: Sonsino, Ofir (os0695) <os0695@intl.att.com>

diff --git a/epsdk-app-onap/pom.xml b/epsdk-app-onap/pom.xml
index a817adb..646c017 100755 (executable)
--- a/epsdk-app-onap/pom.xml
+++ b/epsdk-app-onap/pom.xml
@@ -307,62 +307,7 @@
                        <artifactId>eelf-core</artifactId>\r
                        <version>1.0.0</version>\r
                </dependency>\r
-               <!--Overide versions for latest security fixes-->\r
-               <dependency>\r
-                       <groupId>ch.qos.logback</groupId>\r
-                       <artifactId>logback-core</artifactId>\r
-                       <version>1.2.3</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>ch.qos.logback</groupId>\r
-                       <artifactId>logback-classic</artifactId>\r
-                       <version>1.2.3</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>commons-collections</groupId>\r
-                       <artifactId>commons-collections</artifactId>\r
-                       <version>3.2.2</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>commons-fileupload</groupId>\r
-                       <artifactId>commons-fileupload</artifactId>\r
-                       <version>1.3.3</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>org.bouncycastle</groupId>\r
-                       <artifactId>bcprov-jdk16</artifactId>\r
-                       <version>1.46</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>xalan</groupId>\r
-                       <artifactId>xalan</artifactId>\r
-                       <version>2.7.2</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>org.apache.poi</groupId>\r
-                       <artifactId>poi</artifactId>\r
-                       <version>3.15</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>com.thoughtworks.xstream</groupId>\r
-                       <artifactId>xstream</artifactId>\r
-                       <version>1.4.10</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>org.apache.httpcomponents</groupId>\r
-                       <artifactId>httpclient</artifactId>\r
-                       <version>4.5.3</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>com.fasterxml.jackson.core</groupId>\r
-                       <artifactId>jackson-core</artifactId>\r
-                       <version>2.8.6</version>\r
-               </dependency>\r
-               <dependency>\r
-                       <groupId>xerces</groupId>\r
-                       <artifactId>xercesImpl</artifactId>\r
-                       <version>2.11.0.SP5</version>\r
-               </dependency>\r
+               \r
 \r
 \r
 \r
@@ -385,6 +330,11 @@
                        <artifactId>jackson-annotations</artifactId>\r
                        <version>2.6.3</version>\r
                </dependency>\r
+               <dependency>\r
+                       <groupId>com.fasterxml.jackson.core</groupId>\r
+                       <artifactId>jackson-core</artifactId>\r
+                       <version>2.8.6</version>\r
+               </dependency>\r
                <dependency>\r
                        <groupId>com.fasterxml.jackson.core</groupId>\r
                        <artifactId>jackson-databind</artifactId>\r

diff --git a/pom.xml b/pom.xml
index 9a92169..e4dd40c 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -237,6 +237,63 @@
                        <version>4.11</version>\r
                        <scope>test</scope>\r
                </dependency>\r
+               \r
+               <!--Overide versions for latest security fixes-->\r
+               <dependency>\r
+                       <groupId>ch.qos.logback</groupId>\r
+                       <artifactId>logback-core</artifactId>\r
+                       <version>1.2.3</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>ch.qos.logback</groupId>\r
+                       <artifactId>logback-classic</artifactId>\r
+                       <version>1.2.3</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>commons-collections</groupId>\r
+                       <artifactId>commons-collections</artifactId>\r
+                       <version>3.2.2</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>commons-fileupload</groupId>\r
+                       <artifactId>commons-fileupload</artifactId>\r
+                       <version>1.3.3</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>org.bouncycastle</groupId>\r
+                       <artifactId>bcprov-jdk16</artifactId>\r
+                       <version>1.46</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>xalan</groupId>\r
+                       <artifactId>xalan</artifactId>\r
+                       <version>2.7.2</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>org.apache.poi</groupId>\r
+                       <artifactId>poi</artifactId>\r
+                       <version>3.15</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>com.thoughtworks.xstream</groupId>\r
+                       <artifactId>xstream</artifactId>\r
+                       <version>1.4.10</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>org.apache.httpcomponents</groupId>\r
+                       <artifactId>httpclient</artifactId>\r
+                       <version>4.5.3</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>com.fasterxml.jackson.core</groupId>\r
+                       <artifactId>jackson-core</artifactId>\r
+                       <version>2.8.6</version>\r
+               </dependency>\r
+               <dependency>\r
+                       <groupId>xerces</groupId>\r
+                       <artifactId>xercesImpl</artifactId>\r
+                       <version>2.11.0.SP5</version>\r
+               </dependency>\r
        </dependencies>\r
        <version>1.2.1-SNAPSHOT</version>\r
 </project>\r