From 6932a3bb30ac7e6fc6ef96f2ff413228cb0cbf98 Mon Sep 17 00:00:00 2001
From: japshvincent <japshvincent@gmail.com>
Date: Fri, 3 May 2019 11:16:38 -0500
Subject: [PATCH 1/2] updating lti-launch version

1.4.0 depends on a new version of spring-security-oauth 2.0.17 instead of 2.0.13
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 18b1507..cbc5cc5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -56,7 +56,7 @@
         <dependency>
             <groupId>edu.ksu.ome.lti</groupId>
             <artifactId>lti-launch</artifactId>
-            <version>1.4.0</version>
+            <version>1.4.1</version>
         </dependency>
 
         <dependency>

From 481d2d454e5c216baa377fa2b4a0098ca329bce4 Mon Sep 17 00:00:00 2001
From: japshvincent <japshvincent@gmail.com>
Date: Fri, 3 May 2019 11:33:27 -0500
Subject: [PATCH 2/2] version is being overwritten by parent

to force to use 2.0.17.RELEASE, excluding vulnerable version and readding a secure version.
---
 pom.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pom.xml b/pom.xml
index cbc5cc5..4a686c4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,6 +57,17 @@
             <groupId>edu.ksu.ome.lti</groupId>
             <artifactId>lti-launch</artifactId>
             <version>1.4.1</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.springframework.security.oauth</groupId>
+                    <artifactId>spring-security-oauth</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.security.oauth</groupId>
+            <artifactId>spring-security-oauth</artifactId>
+            <version>2.0.17.RELEASE</version>
         </dependency>
 
         <dependency>