Merge pull request #469 from /issues/468-update-logback

Fix #468: Update logback
wultra · Dec 12, 2023 · 51d86ca · 51d86ca
2 parents bfefe78 + 03e7689
commit 51d86ca
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -87,6 +87,8 @@
         <spring-boot.version>3.1.6</spring-boot.version>
         <commons-text.version>1.11.0</commons-text.version>
         <bcprov.version>1.77</bcprov.version>
+        <!--  TODO (racansky, 2023-12-08) temporarily override the version 1.4.11 from spring boot version because of CVE  -->
+        <logback.version>1.4.14</logback.version>
 
         <wultra-core.version>1.8.0-SNAPSHOT</wultra-core.version>
         <powerauth.version>1.6.0-SNAPSHOT</powerauth.version>
@@ -103,6 +105,18 @@
                 <scope>import</scope>
             </dependency>
 
+            <!--  TODO (racansky, 2023-12-08) temporarily override the version 1.4.11 from spring boot version because of CVE  -->
+            <dependency>
+                <groupId>ch.qos.logback</groupId>
+                <artifactId>logback-classic</artifactId>
+                <version>${logback.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>ch.qos.logback</groupId>
+                <artifactId>logback-core</artifactId>
+                <version>${logback.version}</version>
+            </dependency>
+
             <!-- PowerAuth Restful Integration Dependencies -->
             <dependency>
                 <groupId>io.getlime.security</groupId>