From: Taka Cho <tc012c@att.com>
Date: Thu, 22 Feb 2018 20:30:45 +0000 (-0500)
Subject: fix logback jar security issue
X-Git-Tag: v1.3.0~234
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=2b4298540f9c79cc2b452023800d066c56920b52;p=appc.git

fix logback jar security issue

Change-Id: I51e0fec8131db5f5283182c1fc70a4f5b023dbb1
Issue-ID: APPC-652
Signed-off-by: Taka Cho <tc012c@att.com>
---

diff --git a/appc-directed-graph/dg-loader/pom.xml b/appc-directed-graph/dg-loader/pom.xml
index 866f07c9d..9ad7c76d2 100644
--- a/appc-directed-graph/dg-loader/pom.xml
+++ b/appc-directed-graph/dg-loader/pom.xml
@@ -45,7 +45,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version.source>1.8</java.version.source>
         <java.version.target>1.8</java.version.target>
-        <logback.version>1.1.1</logback.version>
+        <logback.version>1.2.3</logback.version>
         <common.collections.version>3.2.1</common.collections.version>
         <common.io.version>2.5</common.io.version>
         <jettison.version>1.3.7</jettison.version>
diff --git a/appc-outbound/appc-network-inventory-client/pom.xml b/appc-outbound/appc-network-inventory-client/pom.xml
index a22d0a077..900788239 100755
--- a/appc-outbound/appc-network-inventory-client/pom.xml
+++ b/appc-outbound/appc-network-inventory-client/pom.xml
@@ -36,7 +36,7 @@
 
 	<properties>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-		<logback.version>1.1.1</logback.version>
+		<logback.version>1.2.3</logback.version>
 		<common.collections.version>3.2.1</common.collections.version>
 		<common.io.version>2.5</common.io.version>
 		<jettison.version>1.3.7</jettison.version>
diff --git a/pom.xml b/pom.xml
index 514f74833..8f790f6bc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -64,7 +64,7 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
         <apache.httpcomponents.version>4.4</apache.httpcomponents.version>
         <commons.lang3.version>3.4</commons.lang3.version>
         <antlr.version>4.5.1</antlr.version>
-        <logback.version>1.1.1</logback.version>
+        <logback.version>1.2.3</logback.version>
         <toscalib.version>1.1.0</toscalib.version>
         <sdc-client.version>1.2.2</sdc-client.version>
         <jackson.yml.version>2.3.2</jackson.yml.version>
@@ -345,13 +345,13 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.1.1</version>
+                <version>1.2.3</version>
                 <scope>compile</scope>
             </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.1.1</version>
+                <version>1.2.3</version>
                 <scope>compile</scope>
             </dependency>
             <!-- <dependency> -->