summaryrefslogtreecommitdiffstats
path: root/pom.xml
diff options
context:
space:
mode:
authorvv770d <vv770d@att.com>2021-12-14 23:28:16 +0000
committervv770d <vv770d@att.com>2021-12-14 23:28:19 +0000
commit1b152bb4b1a70f30790d8ed66b0294d911d7ccee (patch)
tree4176f0511dcbabbe7221a6d33299a0f7e10e0f4d /pom.xml
parent73ac3918b5e108c2b8b278b1bad76488c0bd3e53 (diff)
[DCAE/ves] Remediation for Log4Shell vulnerability1.10.2
Change-Id: I74221f5e661c1065d94542df403dd2134f7d93e1 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-3022
Diffstat (limited to 'pom.xml')
-rw-r--r--pom.xml17
1 files changed, 14 insertions, 3 deletions
diff --git a/pom.xml b/pom.xml
index b4fb8830..acfb8183 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1,7 +1,7 @@
<?xml version="1.0"?>
<!--
================================================================================
- Copyright (c) 2017-2019 AT&T Intellectual Property. All rights reserved.
+ Copyright (c) 2017-2019,2021 AT&T Intellectual Property. All rights reserved.
Copyright (c) 2020-2021 Nokia. All rights reserved.
================================================================================
Licensed under the Apache License, Version 2.0 (the "License"); you may not
@@ -24,7 +24,7 @@
</parent>
<groupId>org.onap.dcaegen2.collectors.ves</groupId>
<artifactId>VESCollector</artifactId>
- <version>1.10.1-SNAPSHOT</version>
+ <version>1.10.2-SNAPSHOT</version>
<name>dcaegen2-collectors-ves</name>
<description>VESCollector</description>
<properties>
@@ -65,7 +65,8 @@
<commons-collections.version>3.2.2</commons-collections.version>
<commons-configuration.version>1.10</commons-configuration.version>
<vavr.version>0.10.3</vavr.version>
- <spring-boot-starter-log4j2.version>2.4.3</spring-boot-starter-log4j2.version>
+ <spring-boot-starter-log4j2.version>2.6.1</spring-boot-starter-log4j2.version>
+ <log4j.version>2.16.0</log4j.version>
<springfox-swagger2.version>3.0.0</springfox-swagger2.version>
<assertj-core.version>3.19.0</assertj-core.version>
<spring-boot-starter-test.version>2.2.13.RELEASE</spring-boot-starter-test.version>
@@ -394,6 +395,16 @@
<version>${spring-boot-starter-log4j2.version}</version>
</dependency>
<dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j.version}</version>
+ </dependency>
+ <dependency>
<groupId>io.springfox</groupId>
<artifactId>springfox-swagger2</artifactId>
<version>${springfox-swagger2.version}</version>