From 0ea796caa4b17dc181e0a1d3721d75878f7c4e2d Mon Sep 17 00:00:00 2001
From: Hugh Stevenson <hughs@unicenta.com>
Date: Fri, 26 Apr 2024 16:37:16 +0100
Subject: [PATCH 1/5] UOCL-277: xmlgraphics security

---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 1651870..7d5c516 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
 
   <groupId>com.unicenta</groupId>
   <artifactId>unicentaopos</artifactId>
-  <version>5.3</version>
+  <version>5.3.1</version>
   <packaging>jar</packaging>
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -243,7 +243,7 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>fop</artifactId>
-      <version>2.1</version>
+      <version>2.3</version>
     </dependency>
     <dependency>
       <groupId>net.sf.jasperreports</groupId>

From 204862f694ef6931a8218ac0968c10a61b23a595 Mon Sep 17 00:00:00 2001
From: Hugh Stevenson <hughs@unicenta.com>
Date: Fri, 26 Apr 2024 16:39:21 +0100
Subject: [PATCH 2/5] UOCL-278: security jasperreports library upgrade

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 7d5c516..384e9c9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -248,7 +248,7 @@
     <dependency>
       <groupId>net.sf.jasperreports</groupId>
       <artifactId>jasperreports</artifactId>
-      <version>6.4.0</version>
+      <version>6.12.2</version>
       <exclusions>
         <exclusion>
           <groupId>com.lowagie</groupId>

From a97014198b972be2485b4e35cffce8865f5d7310 Mon Sep 17 00:00:00 2001
From: Hugh Stevenson <hughs@unicenta.com>
Date: Fri, 26 Apr 2024 16:50:57 +0100
Subject: [PATCH 3/5] UOCL-279: Postgresql library upgrade

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 384e9c9..648cff1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -383,7 +383,7 @@
     <dependency>
       <groupId>org.postgresql</groupId>
       <artifactId>postgresql</artifactId>
-      <version>9.4.1208</version>
+      <version>42.2.28</version>
     </dependency>
     <dependency>
       <groupId>de.sciss</groupId>

From 8816496cd7df176374993bbf9b662f2e6f99a782 Mon Sep 17 00:00:00 2001
From: Hugh Stevenson <hughs@unicenta.com>
Date: Sat, 27 Apr 2024 14:31:45 +0100
Subject: [PATCH 4/5] UOCL-280: Apache Derby Security update

---
 pom.xml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 648cff1..6a2e2b8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,6 +10,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <maven.compiler.source>11</maven.compiler.source>
     <maven.compiler.target>11</maven.compiler.target>
+    <derby.version>10.15.2.0</derby.version>
   </properties>
   <dependencies>
     <!-- sqlite-jdbc -->
@@ -231,7 +232,17 @@
     <dependency>
       <groupId>org.apache.derby</groupId>
       <artifactId>derby</artifactId>
-      <version>10.14.2.0</version>
+      <version>${derby.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.derby</groupId>
+      <artifactId>derbytools</artifactId>
+      <version>${derby.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.derby</groupId>
+      <artifactId>derbyshared</artifactId>
+      <version>${derby.version}</version>
     </dependency>
     <dependency>
       <groupId>xml-apis</groupId>
@@ -325,7 +336,7 @@
     <dependency>
       <groupId>com.unicenta</groupId>
       <artifactId>unicenta-plugins</artifactId>
-      <version>1.2.6</version>
+      <version>1.2.7</version>
     </dependency>
     <dependency>
       <groupId>com.gluonhq</groupId>

From 9ee5b76dc99a529d3f2da42759f0b901c1740ca9 Mon Sep 17 00:00:00 2001
From: Hugh Stevenson <hughs@unicenta.com>
Date: Sat, 27 Apr 2024 14:54:00 +0100
Subject: [PATCH 5/5] UOCL-281: xstream library security fix

---
 pom.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pom.xml b/pom.xml
index 6a2e2b8..d2bf8db 100644
--- a/pom.xml
+++ b/pom.xml
@@ -331,8 +331,17 @@
           <groupId>org.slf4j</groupId>
           <artifactId>slf4j-simple</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>com.thoughtworks.xstream</groupId>
+          <artifactId>xstream</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>com.thoughtworks.xstream</groupId>
+      <artifactId>xstream</artifactId>
+      <version>1.4.11</version>
+    </dependency>
     <dependency>
       <groupId>com.unicenta</groupId>
       <artifactId>unicenta-plugins</artifactId>