Fix security vulnerabilities 52/86152/3
authoreconwar <conor.ward@est.tech>
Fri, 26 Apr 2019 13:32:21 +0000 (13:32 +0000)
committereconwar <conor.ward@est.tech>
Fri, 26 Apr 2019 13:32:21 +0000 (13:32 +0000)
Decrease Hibernate version to 5.2.9.Final

Change-Id: Ie5fd2103d2d66edc9f67786a51a2451200d16495
Issue-ID: DMAAP-1176
Signed-off-by: econwar <conor.ward@est.tech>
datarouter-node/pom.xml
datarouter-prov/pom.xml
datarouter-subscriber/pom.xml
pom.xml

index 537b05b..06aa3fc 100755 (executable)
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
         </dependency>
-        <dependency>
-            <groupId>com.thoughtworks.xstream</groupId>
-            <artifactId>xstream</artifactId>
-        </dependency>
     </dependencies>
     <profiles>
         <profile>
index 281cea7..56a4b13 100755 (executable)
         <dependency>
             <groupId>org.hibernate</groupId>
             <artifactId>hibernate-entitymanager</artifactId>
-            <version>5.4.1.Final</version>
+            <version>5.2.9.Final</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.hamcrest</groupId>
             <version>1.0.2.Final</version>
         </dependency>
         <dependency>
-            <groupId>com.thoughtworks.xstream</groupId>
-            <artifactId>xstream</artifactId>
+            <groupId>org.dom4j</groupId>
+            <artifactId>dom4j</artifactId>
+            <version>2.1.1</version>
         </dependency>
     </dependencies>
     <profiles>
index 0182362..6c577a3 100755 (executable)
             <version>1.2.17</version>
             <scope>compile</scope>
         </dependency>
-        <dependency>
-            <groupId>com.thoughtworks.xstream</groupId>
-            <artifactId>xstream</artifactId>
-        </dependency>
     </dependencies>
     <profiles>
         <profile>
diff --git a/pom.xml b/pom.xml
index 7a524b5..6db34b6 100755 (executable)
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,6 @@
         <sl4j-api.version>1.7.25</sl4j-api.version>
         <hamcrest-lib.version>1.3</hamcrest-lib.version>
         <annotations.version>12.0</annotations.version>
-        <xstream.version>1.4.10</xstream.version>
     </properties>
     <modules>
         <module>datarouter-prov</module>
                         <groupId>org.databene</groupId>
                         <artifactId>contiperf</artifactId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>com.thoughtworks.xstream</groupId>
+                        <artifactId>xstream</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
             <dependency>
                 <artifactId>json</artifactId>
                 <version>${json.version}</version>
             </dependency>
-            <dependency>
-                <groupId>com.thoughtworks.xstream</groupId>
-                <artifactId>xstream</artifactId>
-                <version>${xstream.version}</version>
-            </dependency>
         </dependencies>
     </dependencyManagement>
     <build>

© 2017 ONAP. Copyright © The Linux Foundation ®. All Rights Reserved.
The Linux Foundation has registered trademarks and uses trademarks.
For a list of trademarks of The Linux Foundation, please see our Trademark Usage page.
Linux is a registered trademark of Linus Torvalds.
Privacy Policy and Terms of Use