diff --git a/changelog.md b/changelog.md index 89bd279..3bac7cf 100644 --- a/changelog.md +++ b/changelog.md @@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## 1.1.1 - 2023-12-20 +### Security +- CVE-2023-6378: A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. + ## 1.1.0 - 2023-12-20 ### Added - The proxy feature diff --git a/pom.xml b/pom.xml index daea8b8..67cff78 100644 --- a/pom.xml +++ b/pom.xml @@ -518,7 +518,7 @@ 5.8.0 UTF-8 UTF-8 - 1.1.0 + 1.1.1 diff --git a/spring-boot-test/pom.xml b/spring-boot-test/pom.xml index bbea474..29a40bc 100644 --- a/spring-boot-test/pom.xml +++ b/spring-boot-test/pom.xml @@ -90,6 +90,16 @@ org.springframework.boot 3.2.0 + + + ch.qos.logback + logback-classic + 1.4.14 + spring-boot-configuration-processor org.springframework.boot