natas_hw
/
dubbo
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

upgrade logging jars due to security issues (#9791)

This commit is contained in:
PJ Fanning 2022-03-16 07:58:47 +01:00 committed by GitHub
parent fc2d4d7187
commit da4f5f227e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
compiler/pom.xml
View File

@ -103,7 +103,7 @@
<profile>
<id>release</id>
<properties>
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
</properties>
<build>
<plugins>

6
dubbo-dependencies-bom/pom.xml
View File

@ -136,10 +136,10 @@
<!-- Log libs -->
<slf4j_version>1.7.25</slf4j_version>
<jcl_version>1.2</jcl_version>
<log4j_version>1.2.16</log4j_version>
<logback_version>1.2.2</logback_version>
<log4j_version>1.2.17</log4j_version>
<logback_version>1.2.11</logback_version>
<!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
<commons_io_version>2.7</commons_io_version>
<embedded_redis_version>0.10.0</embedded_redis_version>

4
dubbo-spring-boot/pom.xml
View File

@ -42,7 +42,7 @@
<spring-boot.version>2.3.1.RELEASE</spring-boot.version>
<dubbo.version>${revision}</dubbo.version>
<!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
</properties>
<dependencyManagement>
@ -192,4 +192,4 @@
</plugin>
</plugins>
</build>
</project>
</project>

2
pom.xml
View File

@ -323,7 +323,7 @@
<profile>
<id>release</id>
<properties>
<log4j2_version>2.17.0</log4j2_version>
<log4j2_version>2.17.2</log4j2_version>
</properties>
<build>
<plugins>