From: Rob Daugherty <rd472p@att.com>
Date: Tue, 20 Mar 2018 20:09:36 +0000 (-0400)
Subject: NexusIQ security violation - httpclient
X-Git-Tag: v1.2.1~375
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=4f4b3d7e48027fc7b9a973f4229eed2ee1b023f5;p=so.git

NexusIQ security violation - httpclient

Violation in:

org.apache-httpcomponents : httpclient : 4.4.1, 4.3.1, 4.3.3, 4.5, 4.5.2

Fix:
Upgrade httpclient to 4.5.5 and httpcore to 4.4.4

Change-Id: Ie31b853102eb2a4fc7fc16441a2a1c18a2b7fa35
Issue-ID: SO-507
Signed-off-by: Rob Daugherty <rd472p@att.com>
---

diff --git a/asdc-controller/pom.xml b/asdc-controller/pom.xml
index 66ecbd8a5e..a06a16ddd8 100644
--- a/asdc-controller/pom.xml
+++ b/asdc-controller/pom.xml
@@ -81,7 +81,6 @@
 		<dependency>
 				<groupId>org.apache.httpcomponents</groupId>
 				<artifactId>httpclient</artifactId>
-				<version>4.5.5</version>
 				<scope>compile</scope>
 				<exclusions>
        		 		<exclusion>  
diff --git a/cloudify-client/pom.xml b/cloudify-client/pom.xml
index 9b2ca39615..057a1ed98f 100644
--- a/cloudify-client/pom.xml
+++ b/cloudify-client/pom.xml
@@ -35,12 +35,10 @@
 		<dependency>
 			<groupId>org.apache.httpcomponents</groupId>
 			<artifactId>httpcore</artifactId>
-<!--			<version>4.3.1</version> -->
 		</dependency>
 		<dependency>
 			<groupId>org.apache.httpcomponents</groupId>
 			<artifactId>httpclient</artifactId>
-<!--			<version>4.5.5</version> -->
 		</dependency>
 		<dependency>
 			<groupId>org.hamcrest</groupId>
diff --git a/pom.xml b/pom.xml
index 263a632365..0ca48368b2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -549,7 +549,7 @@
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
         <artifactId>httpcore</artifactId>
-        <version>4.4.1</version>
+        <version>4.4.4</version>
         <scope>compile</scope>
       </dependency>
       <dependency>