natas_hw
/
dubbo
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

upgrade logger jars due to security concerns (#9796)

This commit is contained in:
PJ Fanning 2022-03-17 03:08:40 +01:00 committed by GitHub
parent d41a0448c7
commit 3c332c5391
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
compiler/pom.xml
View File

@ -125,7 +125,7 @@
<profile>
<id>release</id>
<properties>
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
</properties>
<build>
<plugins>

8
dubbo-dependencies-bom/pom.xml
View File

@ -138,11 +138,11 @@
<!-- Log libs -->
<slf4j_version>1.7.25</slf4j_version>
<jcl_version>1.2</jcl_version>
<log4j_version>1.2.16</log4j_version>
<logback_version>1.2.2</logback_version>
<log4j_version>1.2.17</log4j_version>
<logback_version>1.2.11</logback_version>
<!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
<log4j2_version>2.17.0</log4j2_version>
<commons_io_version>2.6</commons_io_version>
<log4j2_version>2.17.2</log4j2_version>
<commons_io_version>2.7</commons_io_version>
<embedded_redis_version>0.10.0</embedded_redis_version>

2
dubbo-spring-boot/pom.xml
View File

@ -42,7 +42,7 @@
<spring-boot.version>2.3.1.RELEASE</spring-boot.version>
<dubbo.version>${revision}</dubbo.version>
<!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
</properties>
<dependencyManagement>

2
pom.xml
View File

@ -385,7 +385,7 @@
<profile>
<id>release</id>
<properties>
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
<jacoco.skip>false</jacoco.skip>
</properties>
<build>