From b9e2445f3c3f4d0064ce796fa25f722113da5283 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 12 Dec 2018 03:30:51 +0000
Subject: [PATCH] fix: assemblies/pmr-libraries/pom.xml & pom.xml to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMJCRAFT-30302
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKARAF-30660
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKARAF-32012
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEPOI-30698
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEPOI-31387
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEPOI-32049
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEXMLGRAPHICS-30070
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEXMLGRAPHICS-31031
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEXMLGRAPHICS-31389
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEXMLGRAPHICS-31392
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEXMLGRAPHICS-32304
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31329
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31331
- https://snyk.io/vuln/SNYK-JAVA-XALAN-31385
- https://snyk.io/vuln/SNYK-JAVA-XERCES-30183
- https://snyk.io/vuln/SNYK-JAVA-XERCES-31497
- https://snyk.io/vuln/SNYK-JAVA-XERCES-31585
- https://snyk.io/vuln/SNYK-JAVA-XERCES-32014
---
 assemblies/pmr-libraries/pom.xml | 32 ++++++++++++++++----------------
 pom.xml                          |  4 ++--
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/assemblies/pmr-libraries/pom.xml b/assemblies/pmr-libraries/pom.xml
index 63adce590c3..fe89599b948 100644
--- a/assemblies/pmr-libraries/pom.xml
+++ b/assemblies/pmr-libraries/pom.xml
@@ -112,7 +112,7 @@
     <dependency>
       <groupId>com.jcraft</groupId>
       <artifactId>jsch</artifactId>
-      <version>0.1.46</version>
+      <version>0.1.54</version>
     </dependency>
     <dependency>
       <groupId>com.lowagie</groupId>
@@ -317,7 +317,7 @@
     <dependency>
       <groupId>jaxen</groupId>
       <artifactId>jaxen</artifactId>
-      <version>1.1</version>
+      <version>1.1.4</version>
     </dependency>
     <dependency>
       <groupId>jcifs</groupId>
@@ -392,7 +392,7 @@
     <dependency>
       <groupId>net.sourceforge.nekohtml</groupId>
       <artifactId>nekohtml</artifactId>
-      <version>1.9.15</version>
+      <version>1.9.18</version>
     </dependency>
     <dependency>
       <groupId>ognl</groupId>
@@ -432,12 +432,12 @@
     <dependency>
       <groupId>org.apache.poi</groupId>
       <artifactId>poi</artifactId>
-      <version>3.9</version>
+      <version>3.17</version>
     </dependency>
     <dependency>
       <groupId>org.apache.poi</groupId>
       <artifactId>poi-ooxml</artifactId>
-      <version>3.9</version>
+      <version>3.17</version>
     </dependency>
     <dependency>
       <groupId>org.apache.poi</groupId>
@@ -452,7 +452,7 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-anim</artifactId>
-      <version>1.7</version>
+      <version>1.9</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
@@ -462,12 +462,12 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-bridge</artifactId>
-      <version>1.7</version>
+      <version>1.9</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-codec</artifactId>
-      <version>1.7</version>
+      <version>1.10</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
@@ -477,7 +477,7 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-dom</artifactId>
-      <version>1.7</version>
+      <version>1.9</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
@@ -492,7 +492,7 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-gvt</artifactId>
-      <version>1.7</version>
+      <version>1.8</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
@@ -502,17 +502,17 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-script</artifactId>
-      <version>1.7</version>
+      <version>1.8</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-svg-dom</artifactId>
-      <version>1.7</version>
+      <version>1.9</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>batik-transcoder</artifactId>
-      <version>1.7</version>
+      <version>1.9</version>
     </dependency>
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
@@ -607,7 +607,7 @@
     <dependency>
       <groupId>org.mnode.mstor</groupId>
       <artifactId>mstor</artifactId>
-      <version>0.9.13</version>
+      <version>1.0.0</version>
     </dependency>
     <dependency>
       <groupId>org.mvel</groupId>
@@ -897,12 +897,12 @@
     <dependency>
       <groupId>xalan</groupId>
       <artifactId>xalan</artifactId>
-      <version>2.6.0</version>
+      <version>2.7.2</version>
     </dependency>
     <dependency>
       <groupId>xerces</groupId>
       <artifactId>xercesImpl</artifactId>
-      <version>2.9.1</version>
+      <version>2.12.0</version>
     </dependency>
     <dependency>
       <groupId>xml-apis</groupId>
diff --git a/pom.xml b/pom.xml
index bad22df3dcf..5a44be45f85 100644
--- a/pom.xml
+++ b/pom.xml
@@ -40,7 +40,7 @@
     <dependency.json.revision>6.1-SNAPSHOT</dependency.json.revision>
     <dependency.maven-bundle-plugin.revision>2.3.7</dependency.maven-bundle-plugin.revision>
     <dependency.httpcomponents.revision>4.4</dependency.httpcomponents.revision>
-    <dependency.karaf.revision>3.0.3</dependency.karaf.revision>
+    <dependency.karaf.revision>4.0.8</dependency.karaf.revision>
     <plugin.org.codehaus.mojo.build-helper-maven-plugin.version>1.5</plugin.org.codehaus.mojo.build-helper-maven-plugin.version>
     <dependency.pentaho-registry.revision>6.1-SNAPSHOT</dependency.pentaho-registry.revision>
     <dependency.hadoop-shims-cdh54.revision>6.1-SNAPSHOT</dependency.hadoop-shims-cdh54.revision>
@@ -71,7 +71,7 @@
     <dependency.jackson.revision>1.5.2</dependency.jackson.revision>
     <dependency.reporting-engine.revision>6.1-SNAPSHOT</dependency.reporting-engine.revision>
     <dependency.commands.revision>3.3.0-I20070605-0010</dependency.commands.revision>
-    <publish-sonar-phase></publish-sonar-phase>
+    <publish-sonar-phase/>
     <plugin.org.apache.maven.plugins.maven-failsafe-plugin.version>2.17</plugin.org.apache.maven.plugins.maven-failsafe-plugin.version>
     <dependency.hadoop-shims-hdp23.revision>6.1-SNAPSHOT</dependency.hadoop-shims-hdp23.revision>
     <dependency.junit.revision>4.11</dependency.junit.revision>