You are viewing a plain text version of this content. The canonical link for it is here.
Posted to pluto-scm@portals.apache.org by as...@apache.org on 2022/01/06 01:28:45 UTC

[portals-pluto] branch master updated: PLUTO-796 Upgrade to Log4j 2.17.1 due to CVE-2021-45105

This is an automated email from the ASF dual-hosted git repository.

asfgriff pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/portals-pluto.git


The following commit(s) were added to refs/heads/master by this push:
     new 0d50b87  PLUTO-796 Upgrade to Log4j 2.17.1 due to CVE-2021-45105
0d50b87 is described below

commit 0d50b87a0d4618009f2cd253b87eccdc1d2c893f
Author: Neil Griffin <ne...@gmail.com>
AuthorDate: Wed Jan 5 20:28:43 2022 -0500

    PLUTO-796 Upgrade to Log4j 2.17.1 due to CVE-2021-45105
---
 .../src/main/resources/archetype-resources/build.gradle               | 2 +-
 .../src/main/resources/archetype-resources/pom.xml                    | 2 +-
 .../src/main/resources/archetype-resources/build.gradle               | 2 +-
 .../src/main/resources/archetype-resources/pom.xml                    | 2 +-
 .../src/main/resources/archetype-resources/build.gradle               | 2 +-
 .../src/main/resources/archetype-resources/pom.xml                    | 2 +-
 .../src/main/resources/archetype-resources/build.gradle               | 2 +-
 .../src/main/resources/archetype-resources/pom.xml                    | 2 +-
 pom.xml                                                               | 4 ++--
 9 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/build.gradle b/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/build.gradle
index 979ee06..2d98512 100644
--- a/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/build.gradle
+++ b/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/build.gradle
@@ -6,7 +6,7 @@ repositories {
 
 dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version:'1.7.25'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.16.0'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.17.1'
     providedCompile group: 'javax.portlet', name: 'portlet-api', version:'3.0.0'
 }
 
diff --git a/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/pom.xml b/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/pom.xml
index 0056211..b2785d4 100644
--- a/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven-archetypes/bean-portlet-archetype/src/main/resources/archetype-resources/pom.xml
@@ -49,7 +49,7 @@
 		<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-slf4j-impl</artifactId>
-			<version>2.16.0</version>
+			<version>2.17.1</version>
 			<scope>runtime</scope>
 		</dependency>
 	</dependencies>
diff --git a/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/build.gradle b/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/build.gradle
index 979ee06..2d98512 100644
--- a/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/build.gradle
+++ b/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/build.gradle
@@ -6,7 +6,7 @@ repositories {
 
 dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version:'1.7.25'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.16.0'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.17.1'
     providedCompile group: 'javax.portlet', name: 'portlet-api', version:'3.0.0'
 }
 
diff --git a/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/pom.xml b/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/pom.xml
index 0056211..b2785d4 100644
--- a/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven-archetypes/generic-portlet-archetype/src/main/resources/archetype-resources/pom.xml
@@ -49,7 +49,7 @@
 		<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-slf4j-impl</artifactId>
-			<version>2.16.0</version>
+			<version>2.17.1</version>
 			<scope>runtime</scope>
 		</dependency>
 	</dependencies>
diff --git a/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/build.gradle b/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/build.gradle
index 5175934..48535cf 100644
--- a/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/build.gradle
+++ b/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/build.gradle
@@ -6,7 +6,7 @@ repositories {
 
 dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version:'1.7.25'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.16.0'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.17.1'
     compile group: 'org.apache.taglibs', name: 'taglibs-standard-jstlel', version:'1.2.1'
     providedCompile group: 'javax.mvc', name: 'javax.mvc-api', version:'1.0-pfd'
     providedCompile group: 'javax.portlet', name: 'portlet-api', version:'3.0.0'
diff --git a/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/pom.xml b/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/pom.xml
index 3cf0753..24682b5 100644
--- a/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven-archetypes/mvcbean-jsp-portlet-archetype/src/main/resources/archetype-resources/pom.xml
@@ -98,7 +98,7 @@
 		<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-slf4j-impl</artifactId>
-			<version>2.16.0</version>
+			<version>2.17.1</version>
 			<scope>runtime</scope>
 		</dependency>
 		<dependency>
diff --git a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
index 2bf2600..41e4360 100644
--- a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
+++ b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
@@ -7,7 +7,7 @@ repositories {
 dependencies {
     compile group: 'org.apache.portals.pluto', name: 'thymeleaf-mvc-portlet-cdi', version:'3.1.1'
     compile group: 'org.slf4j', name: 'slf4j-api', version:'1.7.25'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.16.0'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.17.1'
     providedCompile group: 'javax.mvc', name: 'javax.mvc-api', version:'1.0-pfd'
     providedCompile group: 'javax.portlet', name: 'portlet-api', version:'3.0.0'
     providedCompile group: 'javax.validation', name: 'validation-api', version:'1.1.0.Final'
diff --git a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
index d909ff6..a81f552 100644
--- a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
@@ -90,7 +90,7 @@
 		<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-slf4j-impl</artifactId>
-			<version>2.16.0</version>
+			<version>2.17.1</version>
 			<scope>runtime</scope>
 		</dependency>
 		<dependency>
diff --git a/pom.xml b/pom.xml
index 5cc1e5e..8ae48e5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -279,12 +279,12 @@ generate mailto links. -->
 			<dependency>
 				<groupId>org.apache.logging.log4j</groupId>
 				<artifactId>log4j-core</artifactId>
-				<version>2.16.0</version>
+				<version>2.17.1</version>
 			</dependency>
 			<dependency>
 				<groupId>org.apache.logging.log4j</groupId>
 				<artifactId>log4j-slf4j-impl</artifactId>
-				<version>2.16.0</version>
+				<version>2.17.1</version>
 			</dependency>
 			<dependency>
 				<groupId>org.slf4j</groupId>