From: liamfallon <liam.fallon@ericsson.com>
Date: Tue, 19 Jun 2018 06:53:02 +0000 (+0800)
Subject: Remove plexus utils vul'y from XML event plugin
X-Git-Tag: 2.0.0~119^2
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F53%2F55053%2F1;p=policy%2Fapex-pdp.git

Remove plexus utils vul'y from XML event plugin

The plexus-utils dependency on JAXB on the XML event plugin has
security vulnerabilities. It is excluded as a dependency.

Change-Id: I84f3bbea221374e0e245ef427aac3ec1ba64f48f
Issue-ID: POLICY-905
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
---

diff --git a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
index fd2be45c1..0e5e57d13 100644
--- a/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
+++ b/plugins/plugins-event/plugins-event-protocol/plugins-event-protocol-xml/pom.xml
@@ -38,7 +38,13 @@
         <dependency>
             <groupId>org.jvnet.jaxb2.maven2</groupId>
             <artifactId>maven-jaxb2-plugin</artifactId>
-            <version>0.13.2</version>
+            <version>0.14.0</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.codehaus.plexus</groupId>
+                    <artifactId>plexus-utils</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.jvnet.jaxb2_commons</groupId>