[DMAAP-MR] Update kohn sec vul packages

Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Change-Id: I8aa8af342ba359e00b342628d9ea1ee0c8444c49
Issue-ID: DMAAP-1748

diff --git a/pom.xml b/pom.xml
index 91b5fee..4574bc5 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -54,13 +54,13 @@
                <onap.nexus.url>https://nexus.onap.org</onap.nexus.url>
                <maven.build.timestamp.format>yyyyMMdd'T'HHmmss'Z'</maven.build.timestamp.format>
                <camel.version>2.21.5</camel.version>
-               <camel.version.latest>3.5.0</camel.version.latest>
+               <camel.version.latest>3.17.0</camel.version.latest>
                <skip.docker.build>false</skip.docker.build>
                <skip.docker.tag>false</skip.docker.tag>
                <skip.docker.push>false</skip.docker.push>
                <docker.push.registry>nexus3.onap.org:10003</docker.push.registry>
                <nexusproxy>https://nexus.onap.org</nexusproxy>
-               <spring.version>3.2.18.RELEASE</spring.version>
+               <spring.version>5.3.20</spring.version>
                <sonar.language>java</sonar.language>
                <sonar.skip>false</sonar.skip>
                <sonar.surefire.reportsPath>${project.build.directory}/surefire-reports</sonar.surefire.reportsPath>
@@ -336,7 +336,7 @@
                <dependency>
                        <groupId>com.fasterxml.woodstox</groupId>
                        <artifactId>woodstox-core</artifactId>
-                       <version>5.3.0</version>
+                       <version>6.2.8</version>
                </dependency>
                <dependency>
                        <groupId>org.grails</groupId>
@@ -394,22 +394,22 @@
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-context</artifactId>
-                       <version>4.3.18.RELEASE</version>
+                       <version>${spring.version}</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-webmvc</artifactId>
-                       <version>5.3.3</version>
+                       <version>${spring.version}</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-core</artifactId>
-                       <version>4.3.18.RELEASE</version>
+                       <version>${spring.version}</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-beans</artifactId>
-                       <version>4.3.18.RELEASE</version>
+                       <version>${spring.version}</version>
                </dependency>
                <dependency>
                        <groupId>commons-io</groupId>
@@ -526,6 +526,7 @@
                <dependency>
                        <groupId>com.fasterxml.jackson.core</groupId>
                        <artifactId>jackson-databind</artifactId>
+                       <version>2.13.4</version>
                </dependency>
                <dependency>
                        <groupId>org.grails</groupId>
@@ -563,7 +564,7 @@
                <dependency>
                        <groupId>org.json</groupId>
                        <artifactId>json</artifactId>
-                       <version>20131018</version>
+                       <version>20220320</version>
                </dependency>
                <!-- CXF JAX-RS extension -->
                <dependency>
@@ -701,6 +702,20 @@
                        <artifactId>ajsc-runner</artifactId>
                        <version>3.0.11-oss</version>
                        <scope>runtime</scope>
+                       <exclusions>
+                               <exclusion>
+                                       <groupId>org.json</groupId>
+                                       <artifactId>json</artifactId>
+                               </exclusion>
+                               <exclusion>
+                                       <groupId>org.eclipse.jetty</groupId>
+                                       <artifactId>jetty-util</artifactId>
+                               </exclusion>
+                               <exclusion>
+                                       <groupId>org.quartz-scheduler</groupId>
+                                       <artifactId>quartz</artifactId>
+                               </exclusion>
+                       </exclusions>
                </dependency>
                <dependency>
                        <groupId>com.att.ajsc</groupId>

diff --git a/src/main/config/ajsc-jetty.xml b/src/main/config/ajsc-jetty.xml
index 449f7de..6b519d2 100644 (file)
--- a/src/main/config/ajsc-jetty.xml
+++ b/src/main/config/ajsc-jetty.xml
@@ -32,7 +32,7 @@
                <Set name="descriptor"><SystemProperty name="AJSC_HOME" />/etc/runner-web.xml</Set>
                <Set name="overrideDescriptor"><SystemProperty name="AJSC_HOME" />/etc/ajsc-override-web.xml</Set>
                <Set name="throwUnavailableOnStartupException">true</Set>
-               <Set name="extraClasspath"><SystemProperty name="AJSC_HOME" />/extJars/json-20131018.jar</Set>
+               <Set name="extraClasspath"><SystemProperty name="AJSC_HOME" />/extJars/json-20220320.jar</Set>
                <Set name="servletHandler">
                        <New class="org.eclipse.jetty.servlet.ServletHandler">
                                <Set name="startWithUnavailable">false</Set>