From 500aac17d617ebbe3dd8a92d98e4c6a3d585ea5f Mon Sep 17 00:00:00 2001
From: Joanne Wang <jowg@amazon.com>
Date: Mon, 5 Feb 2024 15:16:10 -0800
Subject: [PATCH] add logback-classic for CVE-2023-6378

Signed-off-by: Joanne Wang <jowg@amazon.com>
---
 build.gradle | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index 85acafcc..d174e2ed 100644
--- a/build.gradle
+++ b/build.gradle
@@ -66,7 +66,12 @@ apply plugin: 'opensearch.repositories'
 apply from: 'build-tools/opensearchplugin-coverage.gradle'
 
 configurations {
-    ktlint
+    ktlint {
+      resolutionStrategy {
+          force "ch.qos.logback:logback-classic:1.3.14"
+          force "ch.qos.logback:logback-core:1.3.14"
+      }
+   }
 }
 
 dependencies {
@@ -226,4 +231,4 @@ task updateVersion {
         // Include the required files that needs to be updated with new Version
         ant.replaceregexp(file:'build.gradle', match: '"opensearch.version", "\\d.*"', replace: '"opensearch.version", "' + newVersion.tokenize('-')[0] + '-SNAPSHOT"', flags:'g', byline:true)
     }
-}
\ No newline at end of file
+}