This is an automated email from the ASF dual-hosted git repository.

fanningpj pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-pekko-management.git


The following commit(s) were added to refs/heads/main by this push:
     new f6385d65 upgrade logback due to CVE-2023-6378 (#142)
f6385d65 is described below

commit f6385d65b2e9f41c3e495f36eefc86f0d2aa3ffc
Author: PJ Fanning <[email protected]>
AuthorDate: Thu Nov 30 19:17:25 2023 +0100

    upgrade logback due to CVE-2023-6378 (#142)
---
 integration-test/kubernetes-api-java/pom.xml | 2 +-
 project/Dependencies.scala                   | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/integration-test/kubernetes-api-java/pom.xml 
b/integration-test/kubernetes-api-java/pom.xml
index 31d970c2..b17b5a0f 100644
--- a/integration-test/kubernetes-api-java/pom.xml
+++ b/integration-test/kubernetes-api-java/pom.xml
@@ -43,7 +43,7 @@
     <dependency>
       <groupId>ch.qos.logback</groupId>
       <artifactId>logback-classic</artifactId>
-      <version>1.2.3</version>
+      <version>1.2.12</version>
     </dependency>
     <dependency>
       <groupId>org.apache.pekko</groupId>
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 8bcd6cef..c3dadcb5 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -28,7 +28,7 @@ object Dependencies {
   val log4j2Version = "2.17.2"
   val log4j2Slf4j2Version = "2.21.1"
   val logbackVersion = "1.2.11"
-  val logbackSlf4j2Version = "1.3.11"
+  val logbackSlf4j2Version = "1.3.13"
   val slf4j2Version = "2.0.9"
 
   // often called-in transitively with insecure versions of databind / core
@@ -113,7 +113,7 @@ object Dependencies {
   val managementLoglevelsLogbackSlf4j2Overrides = if (Common.testWithSlf4J2) {
     Seq(
       "org.slf4j" % "slf4j-api" % "2.0.9",
-      "ch.qos.logback" % "logback-classic" % "1.3.11" % Test)
+      "ch.qos.logback" % "logback-classic" % "1.3.13" % Test)
   } else {
     Seq.empty
   }


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to