From 68f020c57d6f8b1b6ff77f3e4a832861d0d8d5ac Mon Sep 17 00:00:00 2001
From: Jakub Kochman <jakub.kochman@hyland.com>
Date: Thu, 22 Jan 2026 15:07:33 +0100
Subject: [PATCH] PRODSEC-11108 excluded unused solr/hadoop transitive
 depependency on vulnerable commons-configuration

---
 search-services/alfresco-search/pom.xml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/search-services/alfresco-search/pom.xml b/search-services/alfresco-search/pom.xml
index 77029b95d..bf2e8881c 100644
--- a/search-services/alfresco-search/pom.xml
+++ b/search-services/alfresco-search/pom.xml
@@ -82,6 +82,10 @@
                     <groupId>log4j</groupId>
                     <artifactId>log4j</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-configuration</groupId>
+                    <artifactId>commons-configuration</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -130,6 +134,10 @@
                     <groupId>org.apache.hadoop</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-configuration</groupId>
+                    <artifactId>commons-configuration</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -206,6 +214,10 @@
                     <groupId>org.apache.pdfbox</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-configuration</groupId>
+                    <artifactId>commons-configuration</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -254,6 +266,10 @@
                     <groupId>log4j</groupId>
                     <artifactId>log4j</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-configuration</groupId>
+                    <artifactId>commons-configuration</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <!-- replace simple-xml from solr-clustering with simple-xml-safe -->
@@ -414,6 +430,10 @@
                     <groupId>log4j</groupId>
                     <artifactId>log4j</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-configuration</groupId>
+                    <artifactId>commons-configuration</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>