commit 76b6ff1ce84d4c2ab4518dd5f154083b91680245
author Taka Cho <tc012c@att.com> Sat Aug 18 15:56:57 2018 -0400
committer Patrick Brady <pb071s@att.com> Mon Aug 20 16:14:15 2018 +0000
tree 31e389244c01c8bc1527acf8f0f52d4ab668e74b
parent 8678a53099f255c1c9a12da4f156d97f87b0ac59

resolving logback-classic 1.13 from security issue

cdp-pal and eelf are the jar using logback-classic 1.1.3.
need to use exclusions option in pom file

Issue-ID: APPC-1018
Change-Id: I00b41f9c366a5ead3f4205cd6fa6b9eb74599767
Signed-off-by: Taka Cho <tc012c@att.com>

appc-core/appc-common-bundle/pom.xml

diff --git a/appc-core/appc-common-bundle/pom.xml b/appc-core/appc-common-bundle/pom.xml
index 0f72a16..07300f5 100644
--- a/appc-core/appc-common-bundle/pom.xml
+++ b/appc-core/appc-common-bundle/pom.xml
@@ -31,8 +31,19 @@
   <dependencies>

     <!--  logging  -->

     <dependency>

+         <groupId>ch.qos.logback</groupId>

+         <artifactId>logback-classic</artifactId>

+	 <version>${logback.version}</version>

+    </dependency>

+    <dependency>

       <groupId>com.att.eelf</groupId>

       <artifactId>eelf-core</artifactId>

+      <exclusions>

+           <exclusion>

+               <groupId>ch.qos.logback</groupId>

+               <artifactId>logback-classic</artifactId>

+           </exclusion>

+      </exclusions>

     </dependency>

     <dependency>

       <groupId>org.slf4j</groupId>

@@ -157,4 +168,4 @@
 	   </plugin>

     </plugins>  

   </build>

-</project>
\ No newline at end of file
+</project>