Akanksha-kedia
commented
9 months ago [INFO] Reactor Summary for airlift 0.210-SNAPSHOT: [INFO] [INFO] airlift ............................................ SUCCESS [ 0.988 s] [INFO] log ................................................ SUCCESS [ 0.095 s] [INFO] testing ............................................ SUCCESS [ 0.080 s] [INFO] configuration ...................................... SUCCESS [02:09 min] [INFO] log-manager ........................................ SUCCESS [05:19 min] [INFO] bootstrap .......................................... SUCCESS [02:33 min] [INFO] concurrent ......................................... SUCCESS [ 0.046 s] [INFO] http-utils ......................................... SUCCESS [02:36 min] [INFO] json ............................................... SUCCESS [ 0.106 s] [INFO] stats .............................................. SUCCESS [ 0.068 s] [INFO] security ........................................... SUCCESS [ 0.027 s] [INFO] trace-token ........................................ SUCCESS [ 0.012 s] [INFO] http-client ........................................ SUCCESS [09:17 min] [INFO] node ............................................... SUCCESS [ 0.037 s] [INFO] discovery .......................................... SUCCESS [04:35 min] [INFO] dbpool ............................................. SUCCESS [02:31 min] [INFO] event .............................................. SUCCESS [ 0.357 s] [INFO] http-server ........................................ SUCCESS [02:27 min] [INFO] jaxrs .............................................. SUCCESS [02:40 min] [INFO] jaxrs-testing ...................................... SUCCESS [02:39 min] [INFO] jmx-http-rpc ....................................... SUCCESS [ 0.528 s] [INFO] jmx-http ........................................... SUCCESS [ 0.336 s] [INFO] jmx ................................................ SUCCESS [ 0.265 s] [INFO] launcher ........................................... SUCCESS [ 0.002 s] [INFO] packaging .......................................... SUCCESS [ 0.002 s] [INFO] skeleton-server .................................... SUCCESS [07:11 min] [INFO] sample-server ...................................... SUCCESS [ 0.255 s] [INFO] ------------------------------------------------------------------------ [INFO] BUILD SUCCESS [INFO] ------------------------------------------------------------------------ [INFO] Total time: 44:06 min [INFO] Finished at: 2024-02-18T17:21:27+05:30
Upgrade Logback-core to Mitigate Security Vulnerabilities
Body: Our current version of logback-core has been identified as having two direct vulnerabilities, CVE-2023-6378 and CVE-2021-42550.
[INFO] +- com.facebook.airlift:log-manager:jar:0.210-SNAPSHOT:compile [INFO] | +- org.slf4j:slf4j-jdk14:jar:1.7.25:runtime [INFO] | | - org.slf4j:slf4j-api:jar:1.7.25:runtime [INFO] | +- org.slf4j:log4j-over-slf4j:jar:1.7.25:runtime [INFO] | +- org.slf4j:jcl-over-slf4j:jar:1.7.25:runtime [INFO] | - ch.qos.logback:logback-core:jar:1.2.3:compile