(phoenix-omid) branch master updated: OMID-313 Remove commons-logging due to multiple affecting CVEs (#192)

[stoty]

This is an automated email from the ASF dual-hosted git repository.

stoty pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/phoenix-omid.git


The following commit(s) were added to refs/heads/master by this push:
     new 12b7735d OMID-313 Remove commons-logging due to multiple affecting 
CVEs (#192)
12b7735d is described below

commit 12b7735d0834d157800e06087825edce403760b0
Author: Norbert Meszaros <meszinorbi2...@gmail.com>
AuthorDate: Mon May 5 17:07:27 2025 +0200

    OMID-313 Remove commons-logging due to multiple affecting CVEs (#192)
---
 common/pom.xml | 10 ++++++++++
 pom.xml        | 13 +++++++++++++
 2 files changed, 23 insertions(+)

diff --git a/common/pom.xml b/common/pom.xml
index 2d32cca7..3329f727 100644
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -34,6 +34,10 @@
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>jcl-over-slf4j</artifactId>
+        </dependency>
 
         <!-- end logging -->
 
@@ -68,6 +72,12 @@
             <groupId>commons-beanutils</groupId>
             <artifactId>commons-beanutils</artifactId>
             <version>${beanutils.version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-logging</groupId>
+                    <artifactId>commons-logging</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
 
         <!-- end utils -->
diff --git a/pom.xml b/pom.xml
index 375c702d..b2222f1c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -900,6 +900,10 @@
                         <groupId>org.slf4j</groupId>
                         <artifactId>slf4j-log4j12</artifactId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>commons-logging</groupId>
+                        <artifactId>commons-logging</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
 
@@ -922,6 +926,10 @@
                         <groupId>org.slf4j</groupId>
                         <artifactId>slf4j-log4j12</artifactId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>commons-logging</groupId>
+                        <artifactId>commons-logging</artifactId>
+                    </exclusion>
                     <exclusion>
                         <groupId>ch.qos.reload4j</groupId>
                         <artifactId>reload4j</artifactId>
@@ -1228,6 +1236,11 @@
                 <artifactId>slf4j-api</artifactId>
                 <version>${slf4j.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.slf4j</groupId>
+                <artifactId>jcl-over-slf4j</artifactId>
+                <version>${slf4j.version}</version>
+            </dependency>
 
             <!-- log4j2 dependencies -->
             <dependency>