You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by ad...@apache.org on 2017/11/13 09:12:16 UTC
[3/6] james-project git commit: JAMES-2209 Upgrade Logback to 1.1.11
JAMES-2209 Upgrade Logback to 1.1.11
logback-classic is vulnerable to CVE-2017-5929.
Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/434126b3
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/434126b3
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/434126b3
Branch: refs/heads/master
Commit: 434126b3253416e1c0ab3365950bf3908cfba8b4
Parents: 36ee040
Author: Thibaut SAUTEREAU <ts...@linagora.com>
Authored: Wed Nov 8 16:48:24 2017 +0700
Committer: benwa <bt...@linagora.com>
Committed: Thu Nov 9 15:43:44 2017 +0700
----------------------------------------------------------------------
mpt/pom.xml | 2 --
pom.xml | 4 ++--
2 files changed, 2 insertions(+), 4 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/james-project/blob/434126b3/mpt/pom.xml
----------------------------------------------------------------------
diff --git a/mpt/pom.xml b/mpt/pom.xml
index 7392481..89cd85f 100644
--- a/mpt/pom.xml
+++ b/mpt/pom.xml
@@ -65,8 +65,6 @@
<log4j.version>1.2.16</log4j.version>
<lucene-core.version>3.6.0</lucene-core.version>
<slf4j.version>1.7.25</slf4j.version>
-
- <logback.version>1.1.7</logback.version>
</properties>
<build>
http://git-wip-us.apache.org/repos/asf/james-project/blob/434126b3/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 4cb639c..668a55e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -672,7 +672,7 @@
<guice.version>4.0</guice.version>
<jackrabbit-core.version>2.5.2</jackrabbit-core.version>
- <logback.version>1.1.7</logback.version>
+ <logback.version>1.1.11</logback.version>
</properties>
<dependencyManagement>
@@ -1396,7 +1396,7 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
- <version>1.1.7</version>
+ <version>${logback.version}</version>
</dependency>
<dependency>
<groupId>com.beetstra.jutf7</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org