fix(sec): upgrade ch.qos.logback:logback-classic to 1.2.0 - Githubissues

apache / rocketmq-externals

Mirror of Apache RocketMQ (Incubating)

4.55k stars 3.07k forks source link

fix(sec): upgrade ch.qos.logback:logback-classic to 1.2.0 #896

Open Tango2018cc opened 1 year ago

Tango2018cc commented 1 year ago

What happened？

There are 1 security vulnerabilities found in ch.qos.logback:logback-classic 1.1.3

CVE-2017-5929

What did I do？

Upgrade ch.qos.logback:logback-classic from 1.1.3 to 1.2.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS