From: Taka Cho <tc012c@att.com>
Date: Thu, 6 Sep 2018 20:38:21 +0000 (-0400)
Subject: remove logback 1.1.2 security issue
X-Git-Tag: 1.4.0~35
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=b51a315636321718cde5ea759cebcb1b28a06d94;p=appc.git

remove logback 1.1.2 security issue

under provider, we need to specify logback
artifact to remove the issue

Change-Id: Idb85bac263983447cc4b0d3d8e828371d1c7b2b4
Issue-ID: APPC-1018
Signed-off-by: Taka Cho <tc012c@att.com>
---

diff --git a/appc-config/appc-config-params/provider/pom.xml b/appc-config/appc-config-params/provider/pom.xml
index 6501465b7..f9391c6d6 100644
--- a/appc-config/appc-config-params/provider/pom.xml
+++ b/appc-config/appc-config-params/provider/pom.xml
@@ -50,6 +50,12 @@
                         <version>3.0.8</version>
                 </dependency>
 
+                <dependency>
+                        <groupId>ch.qos.logback</groupId>
+                        <artifactId>logback-classic</artifactId>
+                        <version>1.2.0</version>
+                </dependency>
+
 		<dependency>
 			<groupId>org.openecomp.sdc.common</groupId>
 			<artifactId>openecomp-tosca-datatype</artifactId>
@@ -59,6 +65,10 @@
                                  <groupId>com.datastax.cassandra</groupId>
                                  <artifactId>cassandra-driver-core</artifactId>
                             </exclusion>
+                            <exclusion>
+                                 <groupId>ch.qos.logback</groupId>
+                                 <artifactId>logback-classic</artifactId>
+                            </exclusion>
                         </exclusions>
 		</dependency>