fix for security vulnerabilities

Issue-ID: DMAAP-985
Change-Id: I1f6ade8ac548e0e3f35fd9f782fd74cdd869d621
Signed-off-by: su622b <su622b@att.com>

diff --git a/pom.xml b/pom.xml
index 85b4fe6..8e80e08 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -197,7 +197,7 @@
                <dependency>
                        <groupId>commons-fileupload</groupId>
                        <artifactId>commons-fileupload</artifactId>
-                       <version>1.3.3</version>
+                       <version>1.4</version>
                </dependency>
 
                <dependency>
@@ -352,9 +352,16 @@
                        <version>0.0.1</version>
                </dependency>
                <dependency>
-                       <groupId>javax.mail</groupId>
-                       <artifactId>mail</artifactId>
-                       <version>1.4.4</version>
+               <groupId>com.sun.mail</groupId>
+               <artifactId>javax.mail</artifactId>
+               <version>1.6.0</version>
+               <exclusions>
+                       <!-- javax activation is part of the JDK now -->
+                       <exclusion>
+                               <groupId>javax.activation</groupId>
+                               <artifactId>activation</artifactId>
+                       </exclusion>
+               </exclusions>
                </dependency>
 
                <!-- our Highland Park library -->