[camel] branch master updated: Fix CVE-2014-0114 brought in by commons-beanutils

[jp...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jpoth pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/camel.git


The following commit(s) were added to refs/heads/master by this push:
     new e108b03  Fix CVE-2014-0114 brought in by commons-beanutils
e108b03 is described below

commit e108b03b2b36ebab47b0174113d06d96f304c0b0
Author: jpoth <po...@gmail.com>
AuthorDate: Wed Feb 27 13:32:16 2019 +0100

    Fix CVE-2014-0114 brought in by commons-beanutils
---
 components/camel-velocity/pom.xml                      | 6 ++++++
 tooling/maven/camel-api-component-maven-plugin/pom.xml | 4 ++++
 2 files changed, 10 insertions(+)

diff --git a/components/camel-velocity/pom.xml b/components/camel-velocity/pom.xml
index 2d81c39..8325f7a 100644
--- a/components/camel-velocity/pom.xml
+++ b/components/camel-velocity/pom.xml
@@ -84,6 +84,12 @@
             <artifactId>velocity-tools</artifactId>
             <version>${velocity-tools-version}</version>
             <scope>test</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-beanutils</groupId>
+                    <artifactId>commons-beanutils</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
     </dependencies>
 
diff --git a/tooling/maven/camel-api-component-maven-plugin/pom.xml b/tooling/maven/camel-api-component-maven-plugin/pom.xml
index 1060fed..68fe87d 100644
--- a/tooling/maven/camel-api-component-maven-plugin/pom.xml
+++ b/tooling/maven/camel-api-component-maven-plugin/pom.xml
@@ -109,6 +109,10 @@
           <groupId>org.apache.velocity</groupId>
           <artifactId>velocity</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>commons-beanutils</groupId>
+          <artifactId>commons-beanutils</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>