[iotdb] branch rel/0.12 updated: [IOTDB-2209] Fix logback CVE-2021-42550 issue (#4644)

[ro...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rong pushed a commit to branch rel/0.12
in repository https://gitbox.apache.org/repos/asf/iotdb.git


The following commit(s) were added to refs/heads/rel/0.12 by this push:
     new 4b50fa8  [IOTDB-2209] Fix logback CVE-2021-42550 issue (#4644)
4b50fa8 is described below

commit 4b50fa8c3ddf635fe2772ff395f16d8913248929
Author: Haonan <hh...@outlook.com>
AuthorDate: Tue Dec 28 09:59:39 2021 +0800

    [IOTDB-2209] Fix logback CVE-2021-42550 issue (#4644)
---
 LICENSE-binary | 4 ++--
 pom.xml        | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index e8ec78d..b413657 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -295,8 +295,8 @@ org.slf4j:jcl-over-slf4j:1.7.32
 EPL 1.0
 ------------
 com.h2database:h2-mvstore:1.4.199
-ch.qos.logback:logback-classic:1.2.3
-ch.qos.logback:logback-core:1.2.3
+ch.qos.logback:logback-classic:1.2.10
+ch.qos.logback:logback-core:1.2.10
 
 
 CDDL 1.1
diff --git a/pom.xml b/pom.xml
index 7ac8150..854d0b2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,7 +116,7 @@
         <hive2.version>2.3.6</hive2.version>
         <junit.version>4.13.2</junit.version>
         <slf4j.version>1.7.12</slf4j.version>
-        <logback.version>1.2.3</logback.version>
+        <logback.version>1.2.10</logback.version>
         <joda.version>2.9.9</joda.version>
         <spark.version>2.4.3</spark.version>
         <flink.version>1.11.1</flink.version>