fix logback jar security issue

Change-Id: I51e0fec8131db5f5283182c1fc70a4f5b023dbb1
Issue-ID: APPC-652
Signed-off-by: Taka Cho <tc012c@att.com>

diff --git a/appc-directed-graph/dg-loader/pom.xml b/appc-directed-graph/dg-loader/pom.xml
index 866f07c..9ad7c76 100644 (file)
--- a/appc-directed-graph/dg-loader/pom.xml
+++ b/appc-directed-graph/dg-loader/pom.xml
@@ -45,7 +45,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version.source>1.8</java.version.source>
         <java.version.target>1.8</java.version.target>
-        <logback.version>1.1.1</logback.version>
+        <logback.version>1.2.3</logback.version>
         <common.collections.version>3.2.1</common.collections.version>
         <common.io.version>2.5</common.io.version>
         <jettison.version>1.3.7</jettison.version>

diff --git a/appc-outbound/appc-network-inventory-client/pom.xml b/appc-outbound/appc-network-inventory-client/pom.xml
index a22d0a0..9007882 100755 (executable)
--- a/appc-outbound/appc-network-inventory-client/pom.xml
+++ b/appc-outbound/appc-network-inventory-client/pom.xml
@@ -36,7 +36,7 @@
 
        <properties>
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-               <logback.version>1.1.1</logback.version>
+               <logback.version>1.2.3</logback.version>
                <common.collections.version>3.2.1</common.collections.version>
                <common.io.version>2.5</common.io.version>
                <jettison.version>1.3.7</jettison.version>

diff --git a/pom.xml b/pom.xml
index 514f748..8f790f6 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -64,7 +64,7 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
         <apache.httpcomponents.version>4.4</apache.httpcomponents.version>
         <commons.lang3.version>3.4</commons.lang3.version>
         <antlr.version>4.5.1</antlr.version>
-        <logback.version>1.1.1</logback.version>
+        <logback.version>1.2.3</logback.version>
         <toscalib.version>1.1.0</toscalib.version>
         <sdc-client.version>1.2.2</sdc-client.version>
         <jackson.yml.version>2.3.2</jackson.yml.version>
@@ -345,13 +345,13 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.1.1</version>
+                <version>1.2.3</version>
                 <scope>compile</scope>
             </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.1.1</version>
+                <version>1.2.3</version>
                 <scope>compile</scope>
             </dependency>
             <!-- <dependency> -->