From d6e999b4574039aff36dd6505a4da74685ab171b Mon Sep 17 00:00:00 2001
From: econwar <conor.ward@ericsson.com>
Date: Wed, 5 Sep 2018 16:10:01 +0000
Subject: [PATCH] Update versions to fix security violations

Change-Id: I14831fdee0db98b81b7f090096cb9ae3a8a6ba09
Signed-off-by: Conor Ward <conor.ward@ericsson.com>
Issue-ID: DMAAP-736
---
 datarouter-node/pom.xml       |  4 ++--
 datarouter-prov/pom.xml       |  4 ++--
 datarouter-subscriber/pom.xml | 17 +++++++++++++++++
 pom.xml                       |  1 +
 4 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/datarouter-node/pom.xml b/datarouter-node/pom.xml
index 18743db8..5edffa66 100755
--- a/datarouter-node/pom.xml
+++ b/datarouter-node/pom.xml
@@ -69,13 +69,13 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.2.0</version>
+            <version>${qos.logback.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.2.0</version>
+            <version>${qos.logback.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
diff --git a/datarouter-prov/pom.xml b/datarouter-prov/pom.xml
index 76137578..9ccbb55c 100755
--- a/datarouter-prov/pom.xml
+++ b/datarouter-prov/pom.xml
@@ -45,13 +45,13 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.2.0</version>
+            <version>${qos.logback.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.2.0</version>
+            <version>${qos.logback.version}</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
diff --git a/datarouter-subscriber/pom.xml b/datarouter-subscriber/pom.xml
index 52cb25c7..4d09d68e 100755
--- a/datarouter-subscriber/pom.xml
+++ b/datarouter-subscriber/pom.xml
@@ -91,6 +91,23 @@
             <artifactId>jetty-io</artifactId>
             <version>${jetty.version}</version>
         </dependency>
+        <dependency>
+            <groupId>com.thoughtworks.xstream</groupId>
+            <artifactId>xstream</artifactId>
+            <version>${thoughtworks.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>${qos.logback.version}</version>
+            <scope>compile</scope>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>${qos.logback.version}</version>
+            <scope>compile</scope>
+        </dependency>
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient</artifactId>
diff --git a/pom.xml b/pom.xml
index 43aeca21..2781ab0c 100755
--- a/pom.xml
+++ b/pom.xml
@@ -48,6 +48,7 @@
         <jetty.version>9.3.8.RC0</jetty.version>
         <jetty.websocket.version>8.2.0.v20160908</jetty.websocket.version>
         <thoughtworks.version>1.4.10</thoughtworks.version>
+        <qos.logback.version>1.2.3</qos.logback.version>
         <snapshotNexusPath>/content/repositories/snapshots/</snapshotNexusPath>
         <releaseNexusPath>/content/repositories/releases/</releaseNexusPath>
         <stagingNexusPath>/content/repositories/staging/</stagingNexusPath>
-- 
2.16.6