search

nvuillam / npm-groovy-lint

Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line
https://nvuillam.github.io/npm-groovy-lint/
MIT License
205 stars 63 forks source link

Upgrade logback to 1.4.14 #335

Closed echoix closed 10 months ago

echoix commented 10 months ago

Since there is a CVE, it is suggested to upgrade to 1.4.14 or other patched versions https://avd.aquasec.com/nvd/2023/cve-2023-6378/ https://logback.qos.ch/news.html#1.3.14

I tried to see how I could update the project myself locally, but even with Intellij, I didn't manage to have a working config after 3 hours (or I didn't understand the structure enough). I see that the jars are copied locally in the repo, and no standard java-like configuration is used.

nvuillam commented 10 months ago

Maybe @stevenh can help ? :)

echoix commented 10 months ago

I really tried my best though :)

nvuillam commented 10 months ago

I know you did ^^