diff options
| author |   Tomasz Wrobel <tomasz.wrobel@nokia.com> | 2021-12-23 13:43:31 +0100 |
|---|---|---|
| committer | Tomasz Wrobel <tomasz.wrobel@nokia.com> | 2022-01-10 09:13:59 +0100 |
| commit | 5d5c39e47357f34c20ec53799442e3df107a5c24 (patch) | |
| tree | 59e170092ef1573b9fd259b867dcb4ec65a53be5 /certService/pom.xml | |
| parent | 772825849ca6e40f56c647f3565a59a3d207ba65 (diff) | |
[OOM-CERT-SERVICE]Fix Apache log4j2 vulnerability2.5.0
- Top up spring-boot to 2.5.8
- Top up Apache log4j2 to 2.17.1
- Top up spring-boot-starter-log4j2 to 2.6.2
- Add miising validator bean
Issue-ID: OOM-2903
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I816c59e39344bb1fcc2833bcbd58af7fc1c30d78
Diffstat (limited to 'certService/pom.xml')
| -rw-r--r-- | certService/pom.xml | 29 |
1 files changed, 26 insertions, 3 deletions
diff --git a/certService/pom.xml b/certService/pom.xml index 7f559469..13fed005 100644 --- a/certService/pom.xml +++ b/certService/pom.xml @@ -32,8 +32,24 @@ <artifactId>spring-boot-starter-web</artifactId> </dependency> <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-log4j2</artifactId> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-slf4j-impl</artifactId> + <version>${log4j2.version}</version> + </dependency> + <dependency> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-api</artifactId> + <version>${log4j2.version}</version> + </dependency> + <dependency> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-core</artifactId> + <version>${log4j2.version}</version> + </dependency> + <dependency> + <groupId>org.apache.logging.log4j</groupId> + <artifactId>log4j-jul</artifactId> + <version>${log4j2.version}</version> </dependency> <dependency> <groupId>org.springframework.boot</groupId> @@ -78,7 +94,14 @@ <dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-starter-config</artifactId> - <version>${spring-cloud-starter-config.version}</version> + </dependency> + <dependency> + <groupId>org.springframework.cloud</groupId> + <artifactId>spring-cloud-starter-bootstrap</artifactId> + </dependency> + <dependency> + <groupId>org.hibernate.validator</groupId> + <artifactId>hibernate-validator</artifactId> </dependency> </dependencies> |