From: prakash.e <prakash.e@huawei.com>
Date: Thu, 5 Mar 2020 16:21:03 +0000 (+0530)
Subject: vfc resmanagement jackson vulnerability fix
X-Git-Tag: 1.3.1~3
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=6c3be10d1b1ca904cc1817ca569ac6b05452fcc1;p=vfc%2Fnfvo%2Fresmanagement.git

vfc resmanagement jackson vulnerability fix

Excluded jackson-mapper-asl in jackson-databind artifact

Change-Id: If03082ad06d039e411b09df48265c1d02ca87de8
Issue-ID: VFC-1598
Signed-off-by: Prakash.E <prakash.e@huawei.com>
---

diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml
index 0337897..1d81499 100644
--- a/ResmanagementService/service/pom.xml
+++ b/ResmanagementService/service/pom.xml
@@ -39,6 +39,22 @@
             <groupId>org.codehaus.jackson</groupId>
             <artifactId>jackson-jaxrs</artifactId>
             <version>1.9.13</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.codehaus.jackson</groupId>
+                    <artifactId>jackson-mapper-asl</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.10.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.10.0</version>
         </dependency>
         <!-- security
         <dependency>