Fixes for security vulnerabilities

Issue-ID: DMAAP-387
Change-Id: Ib50c9b238d72de1fa6040c8dd756f1c8ab64a2db
Signed-off-by: su622b <sunil.unnava@att.com>

diff --git a/pom.xml b/pom.xml
index 46ce015..2fbd6d1 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -246,7 +246,7 @@
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
                <dockerLocation>${basedir}/target/swm/package/nix/dist_files/</dockerLocation>
                <docker.image.prefix>simpledemo</docker.image.prefix>
-
+        <javax-mail-version>1.5.0</javax-mail-version>
                <module.ajsc.namespace.name>dmaap</module.ajsc.namespace.name>
                <module.ajsc.namespace.version>v1</module.ajsc.namespace.version>
                <ajscRuntimeVersion>3.0.3-oss</ajscRuntimeVersion>
@@ -333,6 +333,19 @@
                        <version>3.1.200-oss</version>
                </dependency>
                
+               <dependency>
+            <groupId>com.sun.mail</groupId>
+            <artifactId>javax.mail</artifactId>
+            <version>${javax-mail-version}</version>
+            <exclusions>
+              <!-- javax activation is part of the JDK now -->
+              <exclusion>
+                <groupId>javax.activation</groupId>
+                <artifactId>activation</artifactId>
+              </exclusion>
+            </exclusions>
+        </dependency>
+               
                <dependency>
                        <groupId>org.apache.zookeeper</groupId>
                        <artifactId>zookeeper</artifactId>
@@ -386,7 +399,11 @@
         </exclusion>
       </exclusions>
     </dependency>
-    
+    <dependency>
+                       <groupId>org.springframework</groupId>
+                       <artifactId>spring-webmvc</artifactId>
+                       <version>3.2.18.RELEASE</version>
+               </dependency>
                <dependency>
                        <groupId>commons-io</groupId>
                        <artifactId>commons-io</artifactId>