diff options
| author |   vv770d <vv770d@att.com> | 2021-12-14 23:28:16 +0000 |
|---|---|---|
| committer | vv770d <vv770d@att.com> | 2021-12-14 23:28:19 +0000 |
| commit | 1b152bb4b1a70f30790d8ed66b0294d911d7ccee (patch) | |
| tree | 4176f0511dcbabbe7221a6d33299a0f7e10e0f4d /pom.xml | |
| parent | 73ac3918b5e108c2b8b278b1bad76488c0bd3e53 (diff) | |
[DCAE/ves] Remediation for Log4Shell vulnerability1.10.2
Change-Id: I74221f5e661c1065d94542df403dd2134f7d93e1
Signed-off-by: vv770d <vv770d@att.com>
Issue-ID: DCAEGEN2-3022
Diffstat (limited to 'pom.xml')
| -rw-r--r-- | pom.xml | 17 |
1 files changed, 14 insertions, 3 deletions
@@ -1,7 +1,7 @@ <?xml version="1.0"?> <!-- ================================================================================ - Copyright (c) 2017-2019 AT&T Intellectual Property. All rights reserved. + Copyright (c) 2017-2019,2021 AT&T Intellectual Property. All rights reserved. Copyright (c) 2020-2021 Nokia. All rights reserved. ================================================================================ Licensed under the Apache License, Version 2.0 (the "License"); you may not @@ -24,7 +24,7 @@ </parent> <groupId>org.onap.dcaegen2.collectors.ves</groupId> <artifactId>VESCollector</artifactId> - <version>1.10.1-SNAPSHOT</version> + <version>1.10.2-SNAPSHOT</version> <name>dcaegen2-collectors-ves</name> <description>VESCollector</description> <properties> @@ -65,7 +65,8 @@ <commons-collections.version>3.2.2</commons-collections.version> <commons-configuration.version>1.10</commons-configuration.version> <vavr.version>0.10.3</vavr.version> - <spring-boot-starter-log4j2.version>2.4.3</spring-boot-starter-log4j2.version> + <spring-boot-starter-log4j2.version>2.6.1</spring-boot-starter-log4j2.version> + <log4j.version>2.16.0</log4j.version> <springfox-swagger2.version>3.0.0</springfox-swagger2.version> <assertj-core.version>3.19.0</assertj-core.version> <spring-boot-starter-test.version>2.2.13.RELEASE</spring-boot-starter-test.version> @@ -394,6 +395,16 @@ <version>${spring-boot-starter-log4j2.version}</version> </dependency> <dependency> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-core</artifactId> + <version>${log4j.version}</version> + </dependency> + <dependency> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-api</artifactId> + <version>${log4j.version}</version> + </dependency> + <dependency> <groupId>io.springfox</groupId> <artifactId>springfox-swagger2</artifactId> <version>${springfox-swagger2.version}</version> |