Fix the Jar vulnerability and licensing

Updated Jar versions in pom.xml files

Change-Id: I507b9348d7eabba879979a3cfeeefe9d850ecf4a
Issue-ID: SO-457
Signed-off-by: byungwoojun<byung-woo.jun@ericsson.com>

diff --git a/adapters/mso-requests-db-adapter/pom.xml b/adapters/mso-requests-db-adapter/pom.xml
index 582d1ea..51d9092 100644 (file)
--- a/adapters/mso-requests-db-adapter/pom.xml
+++ b/adapters/mso-requests-db-adapter/pom.xml
@@ -22,7 +22,7 @@
                <dependency>
                        <groupId>org.jboss.resteasy</groupId>
                        <artifactId>resteasy-jaxrs</artifactId>
-                       <version>3.0.19.Final</version>
+                       <version>3.5.0.Final</version>
                        <scope>provided</scope>
                        <exclusions>
                                <exclusion>

diff --git a/adapters/mso-workflow-message-adapter/pom.xml b/adapters/mso-workflow-message-adapter/pom.xml
index 46e4a2b..dd17fe8 100644 (file)
--- a/adapters/mso-workflow-message-adapter/pom.xml
+++ b/adapters/mso-workflow-message-adapter/pom.xml
@@ -55,7 +55,7 @@
                <dependency>
                        <groupId>org.apache.httpcomponents</groupId>
                        <artifactId>httpclient</artifactId>
-                       <version>4.5.2</version>
+                       <version>4.5.5</version>
                </dependency>
                <dependency>
                        <groupId>org.onap.so</groupId>

diff --git a/asdc-controller/pom.xml b/asdc-controller/pom.xml
index 75896d2..66ecbd8 100644 (file)
--- a/asdc-controller/pom.xml
+++ b/asdc-controller/pom.xml
@@ -81,7 +81,7 @@
                <dependency>
                                <groupId>org.apache.httpcomponents</groupId>
                                <artifactId>httpclient</artifactId>
-                               <version>4.4.1</version>
+                               <version>4.5.5</version>
                                <scope>compile</scope>
                                <exclusions>
                                        <exclusion>  

diff --git a/bpmn/MSOCommonBPMN/pom.xml b/bpmn/MSOCommonBPMN/pom.xml
index 6067982..a0a5a24 100644 (file)
--- a/bpmn/MSOCommonBPMN/pom.xml
+++ b/bpmn/MSOCommonBPMN/pom.xml
@@ -348,7 +348,7 @@
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-test</artifactId>
-                       <version>${spring.version}</version>
+                       <version>4.3.14.RELEASE</version>
                </dependency>
                <dependency>
                        <groupId>org.openecomp.sdc.sdc-tosca</groupId>

diff --git a/bpmn/MSOCoreBPMN/pom.xml b/bpmn/MSOCoreBPMN/pom.xml
index 690dd54..2f9d574 100644 (file)
--- a/bpmn/MSOCoreBPMN/pom.xml
+++ b/bpmn/MSOCoreBPMN/pom.xml
@@ -73,7 +73,7 @@
         <dependency>
             <groupId>commons-fileupload</groupId>
             <artifactId>commons-fileupload</artifactId>
-            <version>1.3.2</version>
+            <version>1.3.3</version>
         </dependency>
         <dependency>
             <groupId>javax.servlet</groupId>

diff --git a/bpmn/MSOInfrastructureBPMN/pom.xml b/bpmn/MSOInfrastructureBPMN/pom.xml
index 79d3c4f..f7170ff 100644 (file)
--- a/bpmn/MSOInfrastructureBPMN/pom.xml
+++ b/bpmn/MSOInfrastructureBPMN/pom.xml
@@ -342,6 +342,31 @@
                        </exclusions>\r
                </dependency>\r
 \r
+               <!-- bwj add; Jetty-util -->\r
+               <dependency>\r
+                       <groupId>org.eclipse.jetty</groupId>\r
+                       <artifactId>jetty-util</artifactId>\r
+                       <version>9.4.8.v20171121</version>\r
+               </dependency>\r
+               <!-- bwj add; hibernate-validator -->\r
+               <dependency>\r
+                       <groupId>org.hibernate</groupId>\r
+                       <artifactId>hibernate-validator</artifactId>\r
+                       <version>5.4.2.Final</version>\r
+               </dependency>\r
+               <!-- bwj add; spring-test -->\r
+               <dependency>\r
+                       <groupId>org.springframework</groupId>\r
+                       <artifactId>spring-test</artifactId>\r
+                       <version>4.3.14.RELEASE</version>\r
+               </dependency>\r
+               <!-- bwj add; libphonenumber  -->\r
+               <dependency>\r
+                       <groupId>com.googlecode.libphonenumber</groupId>\r
+                       <artifactId>libphonenumber</artifactId>\r
+                       <version>8.9.1</version>\r
+               </dependency>\r
+\r
                <!--for yang tools-->\r
 <!--           <dependency>\r
                        <groupId>org.onap.so</groupId>\r

diff --git a/cloudify-client/pom.xml b/cloudify-client/pom.xml
index f87ee3c..61798c3 100644 (file)
--- a/cloudify-client/pom.xml
+++ b/cloudify-client/pom.xml
@@ -40,7 +40,7 @@
                <dependency>
                        <groupId>org.apache.httpcomponents</groupId>
                        <artifactId>httpclient</artifactId>
-                       <version>4.3.1</version>
+                       <version>4.5.5</version>
                </dependency>
         <dependency>
             <groupId>commons-lang</groupId>

diff --git a/common/pom.xml b/common/pom.xml
index 4d2d66a..aeef257 100644 (file)
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -31,12 +31,12 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.1.1</version>
+            <version>1.2.3</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.1.1</version>
+            <version>1.2.3</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>

diff --git a/mso-api-handlers/mso-api-handler-infra/pom.xml b/mso-api-handlers/mso-api-handler-infra/pom.xml
index 6ee9003..a88c9b6 100644 (file)
--- a/mso-api-handlers/mso-api-handler-infra/pom.xml
+++ b/mso-api-handlers/mso-api-handler-infra/pom.xml
@@ -109,6 +109,12 @@
                        <artifactId>scala-library</artifactId>
                        <version>${scala-lang-version}</version>
                </dependency>
+               <!--bwj added scala-compiler-->
+               <dependency>
+                       <groupId>org.scala-lang</groupId>
+                       <artifactId>scala-compiler</artifactId>
+                       <version>2.12.4</version>
+               </dependency>
                <dependency>
                        <groupId>org.reflections</groupId>
                        <artifactId>reflections</artifactId>

diff --git a/pom.xml b/pom.xml
index c7c9df1..e348468 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -543,7 +543,7 @@
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
         <artifactId>httpclient</artifactId>
-        <version>4.5</version>
+        <version>4.5.5</version>
         <scope>compile</scope>
       </dependency>
       <dependency>