Mercurial > dive4elements > river
diff backend/pom-oracle.xml @ 8801:dece88059a36
(Issue1856) Exclude ACC 3.1, use 3.2.2 instead.
ACC 3.2.2 closes a critical serealization weakness.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Tue, 22 Dec 2015 11:22:06 +0100 |
parents | be28bb0c7f50 |
children | 6fd0f20b58aa aee871c60599 |
line wrap: on
line diff
--- a/backend/pom-oracle.xml Thu Dec 17 18:34:28 2015 +0100 +++ b/backend/pom-oracle.xml Tue Dec 22 11:22:06 2015 +0100 @@ -92,9 +92,23 @@ <version>1.0-SNAPSHOT</version> </dependency> <dependency> + <!-- Add less unsave version of transitive hibernate dependency --> + <groupId>commons-collections</groupId> + <artifactId>commons-collections</artifactId> + <version>3.2.2</version> + <scope>runtime</scope> + </dependency> + <dependency> <groupId>org.hibernate</groupId> <artifactId>hibernate-core</artifactId> <version>3.6.10.Final</version> + <exclusions> + <!-- exclude unsafe transitive dependency --> + <exclusion> + <groupId>commons-collections</groupId> + <artifactId>commons-collections</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>org.hibernate.javax.persistence</groupId>