Update dependency log4j version to avoid security vulnerability #1175

gliu6 · 2021-12-14T17:33:33Z

According to https://logging.apache.org/log4j/2.x/security.html
Log4j all versions from 2.0-beta9 to 2.14.1 has critical vulnerabilities.
The log4j-core and log4j-api and log4j-slf4j-impl used in ativejdbc should be updated.

(cherry picked from commit fc08755)

ipolevoy self-assigned this Dec 14, 2021

ipolevoy added Module: Other In-Progress labels Dec 14, 2021

ipolevoy added a commit that referenced this issue Dec 14, 2021

#1175 Update dependency log4j version to avoid security vulnerability

fc08755

ipolevoy removed the In-Progress label Dec 14, 2021

ipolevoy closed this as completed Dec 14, 2021

ipolevoy added a commit that referenced this issue Dec 16, 2021

#1175 Update dependency log4j version to avoid security vulnerability

378e173

(cherry picked from commit fc08755)

ipolevoy added a commit that referenced this issue Jan 1, 2023

#1175 Update dependency log4j version to avoid security vulnerability

46e4308

(cherry picked from commit fc08755)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency log4j version to avoid security vulnerability #1175

Update dependency log4j version to avoid security vulnerability #1175

gliu6 commented Dec 14, 2021

Update dependency log4j version to avoid security vulnerability #1175

Update dependency log4j version to avoid security vulnerability #1175

Comments

gliu6 commented Dec 14, 2021