From: NicolasLaplaud <nicolas.laplaud@orange.com>
Date: Fri, 13 Apr 2018 09:03:23 +0000 (+0200)
Subject: Fix vulnerability report
X-Git-Tag: 2.0.0-ONAP~52^2
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=33fc4d316d24a028e968a6f28fc2ead595056349;p=externalapi%2Fnbi.git

Fix vulnerability report

 - Exclude old logback-classic from spring-boot-starter-web
 - Add the latest logback-classic release version

Change-Id: I6c6c35ed9ba2e7d8f0176fe086fda4a42576e4bd
Issue-ID: EXTAPI-71
Signed-off-by: NicolasLaplaud <nicolas.laplaud@orange.com>
---

diff --git a/pom.xml b/pom.xml
index 505777a..50e3c21 100644
--- a/pom.xml
+++ b/pom.xml
@@ -105,6 +105,18 @@
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-web</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>ch.qos.logback</groupId>
+					<artifactId>logback-classic</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+
+		<dependency>
+			<groupId>ch.qos.logback</groupId>
+			<artifactId>logback-classic</artifactId>
+			<version>1.2.3</version>
 		</dependency>
 
 		<dependency>