Fix vulnerabilities in dependencies

Exclude commons-beanutils from JMS plugin
Upgrade apacne ant version in XML plugin
Upgrade Grizzly version in all plugins

Issue-ID: POLICY-905
Change-Id: Ifa0d91bdead94be605cf5d51598ce36dd2c7b0fb
Signed-off-by: liamfallon <liam.fallon@ericsson.com>

diff --git a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
index 3ad5d0b..76143fe 100644 (file)
--- a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
+++ b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-jms/pom.xml
@@ -54,6 +54,10 @@
                     <groupId>io.netty</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-beanutils</groupId>
+                    <artifactId>commons-beanutils</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>

diff --git a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-restrequestor/pom.xml b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-restrequestor/pom.xml
index 8a54193..59a3560 100644 (file)
--- a/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-restrequestor/pom.xml
+++ b/plugins/plugins-event/plugins-event-carrier/plugins-event-carrier-restrequestor/pom.xml
@@ -63,5 +63,10 @@
             <version>${project.version}</version>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.inject</groupId>
+            <artifactId>jersey-hk2</artifactId>
+            <version>${version.grizzly2-http}</version>
+        </dependency>
     </dependencies>
 </project>
\ No newline at end of file

diff --git a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
index 0e5e57d..a200faa 100644 (file)
--- a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
+++ b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
@@ -44,6 +44,10 @@
                     <groupId>org.codehaus.plexus</groupId>
                     <artifactId>plexus-utils</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.apache.ant</groupId>
+                    <artifactId>ant</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -51,6 +55,11 @@
             <artifactId>jaxb2-basics-runtime</artifactId>
             <version>1.11.1</version>
         </dependency>
+        <dependency>
+            <groupId>org.apache.ant</groupId>
+            <artifactId>ant</artifactId>
+            <version>1.10.3</version>
+        </dependency>
     </dependencies>
 
     <build>

diff --git a/plugins/pom.xml b/plugins/pom.xml
index 0cf5e85..1889283 100644 (file)
--- a/plugins/pom.xml
+++ b/plugins/pom.xml
@@ -36,8 +36,8 @@
 
     <properties>
         <version.hazelcast>3.8.3</version.hazelcast>
-        <version.jersey.core>2.25.1</version.jersey.core>
-        <version.grizzly2-http>2.25.1</version.grizzly2-http>
+        <version.jersey.core>2.27</version.jersey.core>
+        <version.grizzly2-http>2.27</version.grizzly2-http>
     </properties>
 
     <modules>