From 33fc4d316d24a028e968a6f28fc2ead595056349 Mon Sep 17 00:00:00 2001
From: NicolasLaplaud <nicolas.laplaud@orange.com>
Date: Fri, 13 Apr 2018 11:03:23 +0200
Subject: [PATCH] Fix vulnerability report

 - Exclude old logback-classic from spring-boot-starter-web
 - Add the latest logback-classic release version

Change-Id: I6c6c35ed9ba2e7d8f0176fe086fda4a42576e4bd
Issue-ID: EXTAPI-71
Signed-off-by: NicolasLaplaud <nicolas.laplaud@orange.com>
---
 pom.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pom.xml b/pom.xml
index 505777a..50e3c21 100644
--- a/pom.xml
+++ b/pom.xml
@@ -105,6 +105,18 @@
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-web</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>ch.qos.logback</groupId>
+					<artifactId>logback-classic</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+
+		<dependency>
+			<groupId>ch.qos.logback</groupId>
+			<artifactId>logback-classic</artifactId>
+			<version>1.2.3</version>
 		</dependency>
 
 		<dependency>
-- 
2.16.6