Revert "[PPP-4459] Use of Vulnerable Component: org.eclipse.paho:org.…

…eclipse.paho.client.mqttv3: CVE-2019-11777" This reverts commit e67df8a.
kingofsc220 · Mar 27, 2020 · 140a6db · 140a6db
1 parent e67df8a
commit 140a6db
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/assemblies/core/lib/pom.xml b/assemblies/core/lib/pom.xml
@@ -53,6 +53,7 @@
         <spark.version>2.1.0</spark.version>
         <kafka.spark.version>2.3.2</kafka.spark.version>
         <databricks.version>4.0.0</databricks.version>
+        <paho.version>1.2.0</paho.version>
         <bahir.version>2.3.2</bahir.version>
    </properties>
 
@@ -127,6 +128,13 @@
         <dependency>
             <groupId>org.eclipse.paho</groupId>
             <artifactId>org.eclipse.paho.client.mqttv3</artifactId>
+            <version>${paho.version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>*</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.apache.bahir</groupId>

diff --git a/assemblies/lib/pom.xml b/assemblies/lib/pom.xml
@@ -60,6 +60,7 @@
     <spark.version>2.1.0</spark.version>
     <kafka.spark.version>2.3.2</kafka.spark.version>
     <databricks.version>4.0.0</databricks.version>
+    <paho.version>1.2.0</paho.version>
     <bahir.version>2.3.2</bahir.version>
     <snowflake-jdbc.version>3.6.28</snowflake-jdbc.version>
 
@@ -172,6 +173,13 @@
     <dependency>
       <groupId>org.eclipse.paho</groupId>
       <artifactId>org.eclipse.paho.client.mqttv3</artifactId>
+      <version>${paho.version}</version>
+      <exclusions>
+        <exclusion>
+          <groupId>*</groupId>
+          <artifactId>*</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>org.apache.bahir</groupId>

diff --git a/plugins/streaming/impls/mqtt/pom.xml b/plugins/streaming/impls/mqtt/pom.xml
@@ -58,6 +58,7 @@
     <maven-bundle-plugin.version>2.4.0</maven-bundle-plugin.version>
     <junit.version>4.12</junit.version>
     <guava.version>17.0</guava.version>
+    <paho.version>1.2.0</paho.version>
     <powermock.version>1.6.6</powermock.version>
   </properties>
 
@@ -96,6 +97,7 @@
     <dependency>
       <groupId>org.eclipse.paho</groupId>
       <artifactId>org.eclipse.paho.client.mqttv3</artifactId>
+      <version>${paho.version}</version>
     </dependency>
 
     <dependency>