From: su622b <su622b@att.com>
Date: Tue, 31 Mar 2020 23:08:06 +0000 (-0400)
Subject: fix security vulnerabilities
X-Git-Tag: 6.0.0-ONAP~10
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F10%2F104810%2F2;p=dmaap%2Fmessagerouter%2Fmessageservice.git

fix security vulnerabilities

Issue-ID: DMAAP-1418
Change-Id: I50788ba8083a3188c920f72de342252c5f7e383d
Signed-off-by: su622b <su622b@att.com>
---

diff --git a/pom.xml b/pom.xml
index 97457f4..4461cf2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -306,11 +306,53 @@
 			part of the JDK now <exclusion> <groupId>javax.activation</groupId> <artifactId>activation</artifactId> 
 			</exclusion> </exclusions> </dependency> -->
 
-		<dependency>
-			<groupId>org.apache.zookeeper</groupId>
-			<artifactId>zookeeper</artifactId>
-			<version>3.4.10</version>
-		</dependency>
+	<dependency>
+	<groupId>org.apache.zookeeper</groupId>
+	<artifactId>zookeeper</artifactId>
+	<version>3.4.14</version>
+   </dependency>
+   <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-api</artifactId>
+      <version>1.6.1</version>
+    </dependency>
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-log4j12</artifactId>
+      <version>1.6.1</version>
+      <exclusions>
+        <exclusion>
+          <groupId>*</groupId>
+          <artifactId>*</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+
+	<dependency>
+		<groupId>org.apache.kafka</groupId>
+		<artifactId>kafka_2.11</artifactId>
+		<version>2.3.0</version>
+	</dependency>
+	<dependency>
+		<groupId>commons-codec</groupId>
+		<artifactId>commons-codec</artifactId>
+		<version>1.13</version>
+	</dependency>
+	<dependency>
+		<groupId>org.quartz-scheduler</groupId>
+		<artifactId>quartz</artifactId>
+		<version>2.3.2</version>
+	</dependency>
+	<dependency>
+		<groupId>com.fasterxml.woodstox</groupId>
+		<artifactId>woodstox-core</artifactId>
+		<version>5.3.0</version>
+	</dependency>
+	<dependency>
+		<groupId>org.springframework</groupId>
+		<artifactId>spring-webmvc</artifactId>
+		<version>5.2.3.RELEASE</version>
+	</dependency>
 		<dependency>
 			<groupId>org.grails</groupId>
 			<artifactId>grails-bootstrap</artifactId>
@@ -400,6 +442,10 @@
 			<artifactId>msgrtr</artifactId>
 			<version>1.1.22</version>
 			<exclusions>
+				<exclusion>
+					<groupId>org.apache.kafka</groupId>
+			        <artifactId>kafka_2.11</artifactId>
+				</exclusion>
 				<exclusion>
 					<groupId>org.slf4j</groupId>
 					<artifactId>slf4j-log4j12</artifactId>