From f74e764f2f61dff0103f1ffbc4309376abb15356 Mon Sep 17 00:00:00 2001 From: lazara Date: Thu, 28 Apr 2022 13:57:01 +0300 Subject: [PATCH] defect #1777009: [GitLab] should update Spring in order to fix Critical Zero-Day vulnerability: CVE-2022-22965 Spring4Shell --- pom.xml | 28 ++++++++++++++++------------ 1 file changed, 16 insertions(+), 12 deletions(-) diff --git a/pom.xml b/pom.xml index 603bb98..c1a5cd6 100644 --- a/pom.xml +++ b/pom.xml @@ -48,7 +48,7 @@ org.springframework.boot spring-boot-starter-parent - 2.6.6 + 2.6.7 @@ -159,7 +159,7 @@ org.springframework.boot spring-boot-starter-log4j2 - 2.6.6 + org.apache.logging.log4j @@ -289,6 +289,20 @@ + + org.apache.maven.plugins + maven-jar-plugin + + + + com.microfocus.octane.gitlab.app.Application + + true + + + + + maven-jar-plugin org.apache.maven.plugins @@ -307,16 +321,6 @@ - - - - com.microfocus.octane.gitlab.app.Application - - true - - - - org.apache.maven.plugins