Fix vulnerability report

 - Exclude old logback-classic from spring-boot-starter-web
 - Add the latest logback-classic release version

Change-Id: I6c6c35ed9ba2e7d8f0176fe086fda4a42576e4bd
Issue-ID: EXTAPI-71
Signed-off-by: NicolasLaplaud <nicolas.laplaud@orange.com>

diff --git a/pom.xml b/pom.xml
index 505777a..50e3c21 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -105,6 +105,18 @@
                <dependency>
                        <groupId>org.springframework.boot</groupId>
                        <artifactId>spring-boot-starter-web</artifactId>
+                       <exclusions>
+                               <exclusion>
+                                       <groupId>ch.qos.logback</groupId>
+                                       <artifactId>logback-classic</artifactId>
+                               </exclusion>
+                       </exclusions>
+               </dependency>
+
+               <dependency>
+                       <groupId>ch.qos.logback</groupId>
+                       <artifactId>logback-classic</artifactId>
+                       <version>1.2.3</version>
                </dependency>
 
                <dependency>