From 32780c70147bf7273f7f6a8d81de1a1efd68a92c Mon Sep 17 00:00:00 2001
From: Patrick Brady <pb071s@att.com>
Date: Thu, 13 Sep 2018 06:31:33 -0700
Subject: [PATCH] Remove logback 1.1.2 security issue

Replace the logback version brought brought in by tosca
datatype dependency of appc-config-params.

Change-Id: I6ebeb13676ff284fa4c56b39028d2d91cffdf37a
Signed-off-by: Patrick Brady <pb071s@att.com>
Issue-ID: APPC-1018
---
 appc-config/appc-config-params/provider/pom.xml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/appc-config/appc-config-params/provider/pom.xml b/appc-config/appc-config-params/provider/pom.xml
index 6501465b7..be07d7832 100644
--- a/appc-config/appc-config-params/provider/pom.xml
+++ b/appc-config/appc-config-params/provider/pom.xml
@@ -59,9 +59,17 @@
                                  <groupId>com.datastax.cassandra</groupId>
                                  <artifactId>cassandra-driver-core</artifactId>
                             </exclusion>
+                            <exclusion>
+                                 <groupId>ch.qos.logback</groupId>
+                                 <artifactId>logback-classic</artifactId>
+                            </exclusion>
                         </exclusions>
 		</dependency>
-
+<dependency>
+                        <groupId>ch.qos.logback</groupId>
+                        <artifactId>logback-classic</artifactId>
+                        <version>1.2.3</version>
+                </dependency>
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-databind</artifactId>
@@ -118,7 +126,7 @@
 						<Export-Package>org.onap.sdnc.config.params,org.onap.sdnc.config.params.data,
 							org.onap.sdnc.config.params.parser,org.onap.sdnc.config.params.transformer,
 							org.onap.sdnc.config.params.transformer.tosca,org.onap.sdnc.config.params.transformer.tosca.exceptions</Export-Package>
-						<Import-Package>!com.google.common.collect,*</Import-Package>
+						<Import-Package>groovy.lang;resolution:=optional,org.codehaus.groovy.*;resolution:=optional,!com.google.common.collect,*</Import-Package>
 						<Embed-Dependency>guava,jackson-databind,jackson-annotations,jackson-core,jackson-dataformat-yaml,eelf-core,logback-core,logback-classic</Embed-Dependency>
 						<DynamicImport-Package>*</DynamicImport-Package>
 					</instructions>
-- 
2.16.6