From: varun gudisena <vg411h@att.com>
Date: Tue, 28 Aug 2018 18:17:38 +0000 (+0000)
Subject: Merge "DrProvConnection.java : Fixed sonar issue"
X-Git-Tag: 1.0.16~33
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=dmaap%2Fdbcapi.git;a=commitdiff_plain;h=c303c804ccfe2b8f8428043e6103fdc911fe229d;hp=abe3258c0ee62369e6d2089de853937cdc16dc6e

Merge "DrProvConnection.java : Fixed sonar issue"
---

diff --git a/pom.xml b/pom.xml
index d0c1898..62ca18a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -232,16 +232,19 @@
 			<version>1.2.0</version>
 		</dependency>
 <!-- DMAAP-656:
-   - removed this dependency because it utilized a third party
-   - lib called com.google.guava:20.0 which had severe threat identified.
-   - build code without this dependency and it seemed to work, so perhaps it
-   - is not needed?
+   - override this dependency because it utilized a third party
+   - lib called com.google.guava:20.0 which had severe security threat identified.
+ -->
+		<dependency>
+			<groupId>com.google.guava</groupId>
+			<artifactId>guava</artifactId>
+			<version>24.1.1-jre</version>
+		</dependency>
 		<dependency>
 			<groupId>io.swagger</groupId>
 			<artifactId>swagger-core</artifactId>
 			<version>${swagger.version}</version>
 		</dependency>
- -->
 		<dependency>
 			<groupId>io.swagger</groupId>
 			<artifactId>swagger-jersey2-jaxrs</artifactId>