jffwang
/
hetu-core
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

!1399 Update version of log4j 2 to latest to resolve security vulnerabilities 

Merge pull request !1399 from chenpingzeng/log4j_upgrade
This commit is contained in:
i-robot 2022-03-09 04:20:48 +00:00 committed by Gitee
parent 2468b57afc 9fc9a1c516
commit ca94f1ce20
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 30 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
hetu-hbase/pom.xml
View File

@ -14,6 +14,7 @@
<properties>
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
<dep.log4j.version>2.17.1</dep.log4j.version>
<version.annotations>13.0</version.annotations>
<version.validation-api>2.0.1.Final</version.validation-api>
<version.commons-lang3>3.10</version.commons-lang3>
@ -223,8 +224,28 @@
<artifactId>jetty-webapp</artifactId>
<groupId>org.eclipse.jetty</groupId>
</exclusion>
<exclusion>
<artifactId>log4j</artifactId>
<groupId>log4j</groupId>
</exclusion>
<exclusion>
<artifactId>slf4j-log4j12</artifactId>
<groupId>org.slf4j</groupId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>${dep.log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>${dep.log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-webapp</artifactId>
@ -262,6 +283,14 @@
<artifactId>hadoop-common</artifactId>
<groupId>org.apache.hadoop</groupId>
</exclusion>
<exclusion>
<artifactId>log4j</artifactId>
<groupId>log4j</groupId>
</exclusion>
<exclusion>
<artifactId>slf4j-log4j12</artifactId>
<groupId>org.slf4j</groupId>
</exclusion>
</exclusions>
</dependency>

2
presto-elasticsearch/pom.xml
View File

@ -14,7 +14,7 @@
<properties>
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
<dep.log4j.version>2.17.0</dep.log4j.version>
<dep.log4j.version>2.17.1</dep.log4j.version>
<dep.elasticsearch.version>6.0.0</dep.elasticsearch.version>
<httpcore-nio.version>4.4.5</httpcore-nio.version>
</properties>