Merge pull request #247 from /issues/246-update-logback

Fix #246: Update logback
wultra · Dec 8, 2023 · 75fed3d · 75fed3d
2 parents c50c9b5 + 01e7122
commit 75fed3d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -58,6 +58,8 @@
 
 		<!-- Dependencies -->
 		<spring-boot.version>3.1.6</spring-boot.version>
+		<!--  TODO (racansky, 2023-12-08) temporarily override the version 1.4.11 from spring boot version because of CVE  -->
+		<logback.version>1.4.14</logback.version>
 		<findbugs-annotations.version>3.0.1</findbugs-annotations.version>
 	</properties>
 
@@ -70,6 +72,18 @@
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
+
+			<!--  TODO (racansky, 2023-12-08) temporarily override the version 1.4.11 from spring boot version because of CVE  -->
+			<dependency>
+				<groupId>ch.qos.logback</groupId>
+				<artifactId>logback-classic</artifactId>
+				<version>${logback.version}</version>
+			</dependency>
+			<dependency>
+				<groupId>ch.qos.logback</groupId>
+				<artifactId>logback-core</artifactId>
+				<version>${logback.version}</version>
+			</dependency>
 		</dependencies>
 	</dependencyManagement>