Upgrade jar version to resolve security risk

Upgrade ant, hibernate-core and commons-configuration

Issue-ID: POLICY-2439
Change-Id: I6c22e634e81850ed97c6214ffc202eb68007b8b3
Signed-off-by: Joseph Chou <jc2555@att.com>

diff --git a/policy-core/pom.xml b/policy-core/pom.xml
index 7f20b58..d885f6f 100644 (file)
--- a/policy-core/pom.xml
+++ b/policy-core/pom.xml
@@ -42,6 +42,12 @@
             <artifactId>kie-api</artifactId>
         </dependency>
 
+        <dependency>
+            <groupId>org.apache.ant</groupId>
+            <artifactId>ant</artifactId>
+            <version>1.9.12</version>
+        </dependency>
+
         <dependency>
             <groupId>org.kie</groupId>
             <artifactId>kie-ci</artifactId>
@@ -56,6 +62,10 @@
                     <groupId>org.codehaus.plexus</groupId>
                     <artifactId>plexus-utils</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.apache.ant</groupId>
+                    <artifactId>ant</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/policy-utils/pom.xml b/policy-utils/pom.xml
index 1946947..45f43dd 100644 (file)
--- a/policy-utils/pom.xml
+++ b/policy-utils/pom.xml
@@ -54,7 +54,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-configuration2</artifactId>
-            <version>2.4</version>
+            <version>2.7</version>
         </dependency>
         <dependency>
             <groupId>org.onap.policy.common</groupId>

diff --git a/pom.xml b/pom.xml
index c2d6887..528aed6 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -48,7 +48,7 @@
 
         <!-- Project common dependency versions -->
         <json.path.version>2.4.0</json.path.version>
-        <hibernate.core.version>5.2.10.Final</hibernate.core.version>
+        <hibernate.core.version>5.4.12.Final</hibernate.core.version>
         <hibernate.commons.annotations.version>5.0.1.Final</hibernate.commons.annotations.version>
         <commons.io.version>2.5</commons.io.version>
         <xml.apis.version>1.4.01</xml.apis.version>