Merge pull request #525 from opensrp/security-patches

Security patches

pom.xml

@@ -5,7 +5,7 @@
 
 	<artifactId>opensrp-server-core</artifactId>
 	<packaging>jar</packaging>
-	<version>3.0.7-SNAPSHOT</version>
+	<version>3.0.8-SNAPSHOT</version>
 	<name>opensrp-server-core</name>
 	<description>OpenSRP Server Core module</description>
 	<url>https://github.com/OpenSRP/opensrp-server-core</url>
@@ -14,8 +14,8 @@
 		<main.basedir>${project.basedir}</main.basedir>
 		<spring.version>5.2.4.RELEASE</spring.version>
 		<spring.data.version>2.2.4.RELEASE</spring.data.version>
-		<spring.security.version>5.2.2.RELEASE</spring.security.version>
-		<mybatis.version>3.5.4</mybatis.version>
+		<spring.security.version>5.2.13.RELEASE</spring.security.version>
+		<mybatis.version>3.5.7</mybatis.version>
 		<mybatis.spring.version>2.0.3</mybatis.spring.version>
 		<hibernate.version>5.4.12.Final</hibernate.version>
 		<opensrp.updatePolicy>always</opensrp.updatePolicy>
@@ -204,7 +204,7 @@
 		<dependency>
 			<groupId>org.apache.httpcomponents</groupId>
 			<artifactId>httpclient</artifactId>
-			<version>4.5.2</version>
+			<version>4.5.13</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.commons</groupId>
@@ -309,7 +309,7 @@
 		<dependency>
 			<groupId>org.hibernate.validator</groupId>
 			<artifactId>hibernate-validator</artifactId>
-			<version>6.0.18.Final</version>
+			<version>6.0.22.Final</version>
 		</dependency>
 		<!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-joda -->
 		<dependency>
@@ -327,12 +327,12 @@
 		  <dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-api</artifactId>
-			<version>2.14.0</version>
+			<version>2.15.0</version>
 		  </dependency>
 		  <dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-core</artifactId>
-			<version>2.14.0</version>
+			<version>2.15.0</version>
 		  </dependency>
 
 		<dependency>