From 3b662a534e5c07ddd11b69979fd032332ba8d30f Mon Sep 17 00:00:00 2001
From: aramos <angel.ramos@hitachivantara.com>
Date: Thu, 7 Nov 2024 16:32:22 -0500
Subject: [PATCH] 
 [PPP-4893][PPP-5077][PPP-5128][PPP-4407][PPP-4660][PPP-4760][PPP-5043][PPP-4967]
 Karaf upgrade to 4.4.6 and vulnerability fixes

---
 assemblies/pentaho-war/pom.xml | 33 +++++++++++++++++++++++++--------
 core/pom.xml                   |  2 +-
 extensions/pom.xml             |  9 +++++++--
 pom.xml                        |  1 -
 repository/pom.xml             |  2 +-
 5 files changed, 34 insertions(+), 13 deletions(-)

diff --git a/assemblies/pentaho-war/pom.xml b/assemblies/pentaho-war/pom.xml
index e244b8b152d..225409e9944 100644
--- a/assemblies/pentaho-war/pom.xml
+++ b/assemblies/pentaho-war/pom.xml
@@ -61,10 +61,6 @@
           <artifactId>servlet-api</artifactId>
           <groupId>javax.servlet</groupId>
         </exclusion>
-        <exclusion>
-          <artifactId>javax.servlet-api</artifactId>
-          <groupId>javax.servlet</groupId>
-        </exclusion>
         <exclusion>
           <artifactId>jug-lgpl</artifactId>
           <groupId>org.safehaus.jug</groupId>
@@ -82,11 +78,11 @@
           <groupId>org.apache.xmlgraphics</groupId>
         </exclusion>
         <exclusion>
-          <artifactId>org.osgi.core</artifactId>
+          <artifactId>osgi.core</artifactId>
           <groupId>org.osgi</groupId>
         </exclusion>
         <exclusion>
-          <artifactId>org.osgi.core</artifactId>
+          <artifactId>osgi.core</artifactId>
           <groupId>org.osgi</groupId>
         </exclusion>
         <exclusion>
@@ -549,14 +545,19 @@
     <!-- pentaho-platform-core (PentahoSystem) and pdi-osgi-bridge-core (KarafLifecycleListener and OSGIPluginRegistryExtension) -->
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
       <scope>compile</scope>
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.compendium</artifactId>
+      <artifactId>osgi.cmpn</artifactId>
       <scope>compile</scope>
     </dependency>
+    <dependency>
+      <groupId>org.osgi</groupId>
+      <artifactId>org.osgi.service.log</artifactId>
+      <version>1.5.0</version>
+    </dependency>
     <dependency>
       <groupId>pentaho</groupId>
       <artifactId>pentaho-proxy-factory</artifactId>
@@ -884,6 +885,11 @@
       <artifactId>javax.mail</artifactId>
       <version>${mail.version}</version>
     </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>javax.json</artifactId>
+      <version>1.0.4</version>
+    </dependency>
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
@@ -920,6 +926,17 @@
         </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-simple</artifactId>
+      <version>${slf4j.version}</version>
+      <exclusions>
+        <exclusion>
+          <artifactId>*</artifactId>
+          <groupId>*</groupId>
+        </exclusion>
+      </exclusions>
+    </dependency>
     <dependency>
       <groupId>jcommon</groupId>
       <artifactId>jcommon-xml</artifactId>
diff --git a/core/pom.xml b/core/pom.xml
index f1b0d120435..f0ee144cf14 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -355,7 +355,7 @@
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
     </dependency>
     <dependency>
       <groupId>org.hibernate</groupId>
diff --git a/extensions/pom.xml b/extensions/pom.xml
index c53fc17d431..d8314726a04 100644
--- a/extensions/pom.xml
+++ b/extensions/pom.xml
@@ -2065,11 +2065,11 @@
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.compendium</artifactId>
+      <artifactId>osgi.cmpn</artifactId>
     </dependency>
     <dependency>
       <groupId>org.openjdk.nashorn</groupId>
@@ -2737,6 +2737,11 @@
         </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.springframework.security</groupId>
+      <artifactId>spring-security-crypto</artifactId>
+      <version>5.8.12</version>
+    </dependency>
   </dependencies>
   <build>
     <plugins>
diff --git a/pom.xml b/pom.xml
index 61c8ebc2a4d..55ed901d752 100644
--- a/pom.xml
+++ b/pom.xml
@@ -50,7 +50,6 @@
     <asm-attrs.version>2.2.3</asm-attrs.version>
     <mstor.version>0.9.13</mstor.version>
     <hibernate-commons-annotations.version>5.1.2.Final</hibernate-commons-annotations.version>
-    <mina-core.version>2.0.0-M6</mina-core.version>
     <hamcrest-all.version>1.3</hamcrest-all.version>
     <javax.inject.version>1</javax.inject.version>
     <pentaho-vfs.version>1.0</pentaho-vfs.version>
diff --git a/repository/pom.xml b/repository/pom.xml
index abe7ef0911c..424ee35ecc5 100644
--- a/repository/pom.xml
+++ b/repository/pom.xml
@@ -780,7 +780,7 @@
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
       <scope>test</scope>
     </dependency>
     <dependency>