Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency ch.qos.logback:logback-core to v1.2.13 [SECURITY] #74

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 30, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ch.qos.logback:logback-core (source, changelog) 1.2.11 -> 1.2.13 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 30, 2023 08:23
@renovate renovate bot changed the title Update dependency ch.qos.logback:logback-core to v1.3.12 [SECURITY] Update dependency ch.qos.logback:logback-core to v1.2.13 [SECURITY] Dec 6, 2023
@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch from a265cb5 to 15629ed Compare December 6, 2023 02:38
Copy link

codecov bot commented Dec 6, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.05%. Comparing base (11fd78b) to head (1eeb5a6).

Additional details and impacted files
@@            Coverage Diff            @@
##             master      #74   +/-   ##
=========================================
  Coverage     60.05%   60.05%           
  Complexity      373      373           
=========================================
  Files           111      111           
  Lines          1412     1412           
  Branches        121      121           
=========================================
  Hits            848      848           
  Misses          480      480           
  Partials         84       84           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch 2 times, most recently from ffafbdb to 4e6bdfe Compare January 29, 2024 08:21
@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch from 4e6bdfe to 1a35748 Compare February 2, 2024 06:57
@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch from 1a35748 to 1eeb5a6 Compare March 31, 2024 08:56
@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch from 1eeb5a6 to 7997b7f Compare July 10, 2024 11:06
@renovate renovate bot force-pushed the renovate/maven-ch.qos.logback-logback-core-vulnerability branch from 7997b7f to 9cf1116 Compare July 10, 2024 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants