You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openwebbeans.apache.org by st...@apache.org on 2021/12/12 19:52:02 UTC

[openwebbeans] branch master updated: OWB-1396 upgrade to log4j2 2.15.0

This is an automated email from the ASF dual-hosted git repository.

struberg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openwebbeans.git


The following commit(s) were added to refs/heads/master by this push:
     new f7b0cbb  OWB-1396 upgrade to log4j2 2.15.0
f7b0cbb is described below

commit f7b0cbb6432c364b2d7a5bbb6a71b0dcc4ef407d
Author: Mark Struberg <st...@apache.org>
AuthorDate: Sun Dec 12 20:51:13 2021 +0100

    OWB-1396 upgrade to log4j2 2.15.0
    
    was only a provided compile time dependency, so strictly speaking not a security risk.
---
 webbeans-gradle/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webbeans-gradle/pom.xml b/webbeans-gradle/pom.xml
index 47f8a77..e7ba50e 100644
--- a/webbeans-gradle/pom.xml
+++ b/webbeans-gradle/pom.xml
@@ -57,7 +57,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.13.3</version>
+      <version>2.15.0</version>
       <scope>provided</scope>
       <optional>true</optional>
     </dependency>