You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iotdb.apache.org by ha...@apache.org on 2021/12/28 01:23:47 UTC

[iotdb] branch IOTDB220912 created (now 29441a8)

This is an automated email from the ASF dual-hosted git repository.

haonan pushed a change to branch IOTDB220912
in repository https://gitbox.apache.org/repos/asf/iotdb.git.


      at 29441a8  [IOTDB-2209] Fix logback CVE-2021-42550 issue

This branch includes the following new commits:

     new 29441a8  [IOTDB-2209] Fix logback CVE-2021-42550 issue

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


[iotdb] 01/01: [IOTDB-2209] Fix logback CVE-2021-42550 issue

Posted by ha...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

haonan pushed a commit to branch IOTDB220912
in repository https://gitbox.apache.org/repos/asf/iotdb.git

commit 29441a89f2270489e6a80e9d803a9a9dd7f438fa
Author: HTHou <hh...@outlook.com>
AuthorDate: Tue Dec 28 09:16:26 2021 +0800

    [IOTDB-2209] Fix logback CVE-2021-42550 issue
---
 LICENSE-binary | 4 ++--
 pom.xml        | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index e8ec78d..b413657 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -295,8 +295,8 @@ org.slf4j:jcl-over-slf4j:1.7.32
 EPL 1.0
 ------------
 com.h2database:h2-mvstore:1.4.199
-ch.qos.logback:logback-classic:1.2.3
-ch.qos.logback:logback-core:1.2.3
+ch.qos.logback:logback-classic:1.2.10
+ch.qos.logback:logback-core:1.2.10
 
 
 CDDL 1.1
diff --git a/pom.xml b/pom.xml
index 7ac8150..854d0b2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,7 +116,7 @@
         <hive2.version>2.3.6</hive2.version>
         <junit.version>4.13.2</junit.version>
         <slf4j.version>1.7.12</slf4j.version>
-        <logback.version>1.2.3</logback.version>
+        <logback.version>1.2.10</logback.version>
         <joda.version>2.9.9</joda.version>
         <spark.version>2.4.3</spark.version>
         <flink.version>1.11.1</flink.version>