Update to use version 2.17.1 to resolve log4shell vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I26727d116f066f4041e374d06b894223a86c96a4
17 files changed:
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
- <version>2.11.2</version>
+ <version>2.17.1</version>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
- <version>2.16.0</version>
+ <version>2.17.1</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-api</artifactId>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-api</artifactId>
- <version>2.0.9</version>
+ <version>2.0.14</version>
</dependency>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-log4j2</artifactId>
</dependency>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-log4j2</artifactId>
- <version>2.0.9</version>
+ <version>2.0.14</version>
</dependency>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-logback</artifactId>
</dependency>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>
<artifactId>pax-logging-logback</artifactId>
- <version>2.0.9</version>
+ <version>2.0.14</version>
</dependency>
<dependency>
<groupId>org.ops4j.pax.tipi</groupId>
</dependency>
<dependency>
<groupId>org.ops4j.pax.tipi</groupId>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.21.1</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<testng.version>6.14.3</testng.version>
<ccsdk.sli.plugins.version>${ccsdk.sli.version}</ccsdk.sli.plugins.version>
<ccsdk.distribution.version>1.2.2-SNAPSHOT</ccsdk.distribution.version>
<ccsdk.sli.plugins.version>${ccsdk.sli.version}</ccsdk.sli.plugins.version>
<ccsdk.distribution.version>1.2.2-SNAPSHOT</ccsdk.distribution.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<fasterxml.jackson.version>2.10.5</fasterxml.jackson.version>
<velocity.version>2.3</velocity.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<fasterxml.jackson.version>2.10.5</fasterxml.jackson.version>
<velocity.version>2.3</velocity.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<netty-ssl>${springboot.netty.ssl.version}</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<netty-ssl>${springboot.netty.ssl.version}</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+
</dependencies>
</dependencyManagement>
</dependencies>
</dependencyManagement>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<netty-ssl>2.0.39.Final</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<netty-ssl>2.0.39.Final</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+
</dependencies>
</dependencyManagement>
</dependencies>
</dependencyManagement>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
<derby.version>10.14.2.0</derby.version>
<eelf.version>1.0.0</eelf.version>
<grpc.version>1.25.0</grpc.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<netty-ssl>2.0.39.Final</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<netty-ssl>2.0.39.Final</netty-ssl>
<protobuff.java.version>3.10.0</protobuff.java.version>
<protobuff.java.utils.version>3.10.0</protobuff.java.utils.version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+
</dependencies>
</dependencyManagement>
</dependencies>
</dependencyManagement>
<jettison.version>1.3.8</jettison.version>
<logback.version>1.2.3</logback.version>
<jettison.version>1.3.8</jettison.version>
<logback.version>1.2.3</logback.version>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<slf4j.version>1.7.32</slf4j.version>
<mariadb.connector.version>2.7.3</mariadb.connector.version>
<mariadb4j.version>2.4.0</mariadb4j.version>
<slf4j.version>1.7.32</slf4j.version>
<bundle.plugin.version>2.5.0</bundle.plugin.version>
<checkstyle.skip>true</checkstyle.skip>
<bundle.plugin.version>2.5.0</bundle.plugin.version>
<checkstyle.skip>true</checkstyle.skip>
- <log4j.version>2.16.0</log4j.version>
- <log4j2.version>2.16.0</log4j2.version>
+ <log4j.version>2.17.1</log4j.version>
+ <log4j2.version>2.17.1</log4j2.version>
<mariadb.connector.version>2.7.2</mariadb.connector.version>
<fasterxml.jackson.version>2.12.4</fasterxml.jackson.version>
<velocity.version>2.3</velocity.version>
<mariadb.connector.version>2.7.2</mariadb.connector.version>
<fasterxml.jackson.version>2.12.4</fasterxml.jackson.version>
<velocity.version>2.3</velocity.version>
<artifactId>slf4j-api</artifactId>
<version>1.7.29</version>
</dependency>
<artifactId>slf4j-api</artifactId>
<version>1.7.29</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>2.17.1</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>2.17.1</version>
+ </dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
- <version>2.11.2</version>
+ <version>2.17.1</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>