CVE-2021-42550.md

CVE-2021-42550 (Logback Java Library)

Details: https://cubetiq.atlassian.net/browse/CERT-5

Resolved

Upgrade logback to version: 1.2.9

Spring Boot

Gradle Kotlin DSL (build.gradle.kts) (Gradle Multiple Modules)

allprojects {
    // Fixed Zero-Day CVE-2021-42550: https://cubetiq.atlassian.net/browse/CERT-5
    ext["logback.version"] = "1.2.9"
}

Gradle Kotlin DSL (build.gradle.kts) (Gradle Single Module)

// Fixed Zero-Day CVE-2021-42550: https://cubetiq.atlassian.net/browse/CERT-5
ext["logback.version"] = "1.2.9"

Gradle DSL (build.gradle) (Gradle Multiple Modules)

allprojects {
    ext {
        // Fixed Zero-Day CVE-2021-42550: https://cubetiq.atlassian.net/browse/CERT-5
        set('logback.version', '1.2.9')
    }
}

Or

ext {
    // Fixed Zero-Day CVE-2021-42550: https://cubetiq.atlassian.net/browse/CERT-5
    set('logback.version', '1.2.9')
}