spring security upgrade

Security fix

Issue-ID: DCAEGEN2-1208
Change-Id: I6430beb64de4353bc636f295e7960115a9f89fa9
Signed-off-by: Jegadeesh Babu <jegabab1@in.ibm.com>

diff --git a/dcae-analytics/pom.xml b/dcae-analytics/pom.xml
index 8bdcf1d..659d099 100644 (file)
--- a/dcae-analytics/pom.xml
+++ b/dcae-analytics/pom.xml
@@ -58,6 +58,7 @@
         <eelf.logger.version>3.0.0-SNAPSHOT</eelf.logger.version>
         <spring.boot.version>2.0.5.RELEASE</spring.boot.version>
         <spring.cloud.version>Finchley.RC2</spring.cloud.version>
+        <spring.version>5.0.11.RELEASE</spring.version>
         <commons.text.version>1.4</commons.text.version>
         <springfox-swagger2.version>2.9.2</springfox-swagger2.version>
         <findbugs.jsr305.version>3.0.2</findbugs.jsr305.version>
@@ -246,6 +247,12 @@
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>
                 <version>${spring.boot.version}</version>
+              <exclusions>
+                <exclusion> 
+                  <groupId>org.springframework</groupId>
+                  <artifactId>spring-web</artifactId>
+                </exclusion>
+              </exclusions>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -257,7 +264,11 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
-
+          <dependency>
+            <groupId>org.springframework</groupId>
+            <artifactId>spring-web</artifactId>
+            <version>${spring.version}</version>
+          </dependency>
         </dependencies>
     </dependencyManagement>