Skip to content

Commit

Permalink
Upgrade logback dependency due CVE (#11271)
Browse files Browse the repository at this point in the history
Motivation:

Older version of logback are affected by [CVE-2017-5929]. While its an optional dependency we should upgrade

Modifications:

Upgrade to 1.2.3

Result:

No more reports about using affected logback version
  • Loading branch information
normanmaurer committed May 18, 2021
1 parent fd9970f commit f03f572
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pom.xml
Expand Up @@ -755,7 +755,7 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
<version>1.1.7</version>
<version>1.2.3</version>
<scope>test</scope>
</dependency>

Expand Down

0 comments on commit f03f572

Please sign in to comment.