updated few jars for security fix

[portal.git] / ecomp-portal-BE-os / pom.xml

diff --git a/ecomp-portal-BE-os/pom.xml b/ecomp-portal-BE-os/pom.xml
index 52ce3d3..5372e0a 100644 (file)
--- a/ecomp-portal-BE-os/pom.xml
+++ b/ecomp-portal-BE-os/pom.xml
@@ -5,7 +5,7 @@
        <parent>
                <groupId>org.onap.portal</groupId>
                <artifactId>onap-portal-parent</artifactId>
-               <version>2.6.0</version>
+               <version>3.4.0</version>
        </parent>
 
        <artifactId>portal-be-os</artifactId>
@@ -210,6 +210,11 @@
        </build>
 
        <dependencies>
+           <dependency>
+                       <groupId>com.fasterxml.jackson.core</groupId>
+                       <artifactId>jackson-core</artifactId>
+                       <version>2.11.0</version>
+                       </dependency>
                <!-- Spring -->
                <dependency>
                        <groupId>org.springframework</groupId>
@@ -231,6 +236,11 @@
                        <artifactId>spring-tx</artifactId>
                        <version>${springframework.version}</version>
                </dependency>
+               <dependency> 
+                       <groupId>org.springframework</groupId> 
+                       <artifactId>spring-expression</artifactId> 
+                       <version>${springframework.version}</version> 
+               </dependency>
                <dependency>
                        <groupId>org.springframework</groupId>
                        <artifactId>spring-context-support</artifactId>
@@ -246,21 +256,7 @@
                        <artifactId>spring-test</artifactId>
                        <version>${springframework.version}</version>
                </dependency>
-               <dependency>
-                       <groupId>org.springframework.boot</groupId>
-                       <artifactId>spring-boot-starter</artifactId>
-                       <version>1.3.0.RELEASE</version>
-                       <exclusions>
-                               <exclusion>
-                                       <groupId>org.slf4j</groupId>
-                                       <artifactId>log4j-over-slf4j</artifactId>
-                               </exclusion>
-                               <exclusion>
-                                       <groupId>ch.qos.logback</groupId>
-                                       <artifactId>logback-classic</artifactId>
-                               </exclusion>
-                       </exclusions>
-               </dependency>
+               
                <!-- Hibernate -->
                <dependency>
                        <groupId>org.hibernate</groupId>
@@ -270,8 +266,9 @@
                <dependency>
                        <groupId>org.hibernate</groupId>
                        <artifactId>hibernate-validator</artifactId>
-                       <version>5.1.3.Final</version>
+                       <version>5.4.3.Final</version>
                </dependency>
+               
                <!-- Servlet+JSP+JSTL -->
                <dependency>
                        <groupId>javax.servlet</groupId>
@@ -309,27 +306,8 @@
                        <artifactId>tiles-jsp</artifactId>
                        <version>3.0.5</version>
                </dependency>
-               <dependency>
-                       <groupId>org.apache.cxf</groupId>
-                       <artifactId>cxf-rt-rs-client</artifactId>
-                       <version>3.0.0-milestone1</version>
-               </dependency>
                <!-- Mapper -->
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-annotations</artifactId>
-                       <version>2.8.10</version>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-core</artifactId>
-                       <version>2.8.10</version>
-               </dependency>
-               <dependency>
-                       <groupId>com.fasterxml.jackson.core</groupId>
-                       <artifactId>jackson-databind</artifactId>
-                       <version>2.8.10</version>
-               </dependency>
+               
                <dependency>
                        <groupId>com.fasterxml</groupId>
                        <artifactId>classmate</artifactId>
@@ -345,12 +323,16 @@
                <dependency>
                        <groupId>org.elasticsearch</groupId>
                        <artifactId>elasticsearch</artifactId>
-                       <version>2.2.0</version>
+                       <version>7.6.1</version>
                        <exclusions>
                                <exclusion>
                                        <groupId>org.apache.lucene</groupId>
                                        <artifactId>lucene-queryparser</artifactId>
                                </exclusion>
+                               <exclusion>
+                                       <groupId>com.fasterxml.jackson.core</groupId>
+                                       <artifactId>jackson-core</artifactId>
+                               </exclusion>
                        </exclusions>
                </dependency>
                <dependency>
@@ -386,7 +368,7 @@
                <dependency>
                        <groupId>org.apache.poi</groupId>
                        <artifactId>poi</artifactId>
-                       <version>3.15</version>
+                       <version>4.1.2</version>
                        <exclusions>
                                <exclusion>
                                        <groupId>commons-logging</groupId>
@@ -401,7 +383,7 @@
                <dependency>
                        <groupId>org.apache.poi</groupId>
                        <artifactId>poi-ooxml</artifactId>
-                       <version>3.15</version>
+                       <version>4.1.2</version>
                        <exclusions>
                                <exclusion>
                                        <groupId>commons-logging</groupId>
@@ -416,7 +398,7 @@
                <dependency>
                        <groupId>org.apache.poi</groupId>
                        <artifactId>poi-scratchpad</artifactId>
-                       <version>3.5-FINAL</version>
+                       <version>4.1.2</version>
                        <exclusions>
                                <exclusion>
                                        <groupId>commons-logging</groupId>
@@ -447,7 +429,7 @@
                <dependency>
                        <groupId>org.quartz-scheduler</groupId>
                        <artifactId>quartz</artifactId>
-                       <version>2.2.1</version>
+                       <version>2.3.2</version>
                        <exclusions>
                                <!-- SDK brings a new version of c3p0 -->
                                <exclusion>
@@ -456,11 +438,6 @@
                                </exclusion>
                        </exclusions>
                </dependency>
-               <dependency>
-                       <groupId>commons-codec</groupId>
-                       <artifactId>commons-codec</artifactId>
-                       <version>1.9</version>
-               </dependency>
                <dependency>
                        <groupId>com.att.nsa</groupId>
                        <artifactId>cambriaClient</artifactId>
@@ -497,13 +474,31 @@
                        <version>${epsdk.version}</version>
                        <type>jar</type>
                                 <exclusions>
-                               <exclusion>
+                                       <exclusion>
                        <groupId>commons-beanutils</groupId>
                        <artifactId>commons-beanutils-core</artifactId>
-                </exclusion>
-              </exclusions>
+                                       </exclusion>
+                                       <exclusion>
+                       <groupId>org.owasp.esapi</groupId>
+                       <artifactId>esapi</artifactId>
+                                       </exclusion>
+                                       <exclusion>
+                       <groupId>com.mchange</groupId>
+                                       <artifactId>c3p0</artifactId>
+                                       </exclusion>
+                               </exclusions>
                        
                </dependency>
+               <dependency>
+                       <groupId>org.owasp.esapi</groupId>
+                       <artifactId>esapi</artifactId>
+                       <version>2.2.0.0</version>
+               </dependency>
+               <dependency>
+                       <groupId>com.mchange</groupId>
+                       <artifactId>c3p0</artifactId>
+                       <version>0.9.5.4</version>
+               </dependency>
                <!-- EcompPortal common overlay -->
                <dependency>
                        <groupId>org.onap.portal</groupId>
@@ -606,11 +601,6 @@
                        <version>1.8.5</version>
                        <scope>test</scope>
                </dependency>
-               <dependency>
-                       <groupId>commons-beanutils</groupId>
-                       <artifactId>commons-beanutils</artifactId>
-                       <version>1.9.3</version>
-               </dependency>
                <!-- OpenID Connect Dependencies -->
                <dependency>
                        <groupId>org.mitre</groupId>