upgrade logging jars due to security issues (apache#9791)

iiweniiang · Mar 16, 2022 · da4f5f2 · da4f5f2
1 parent fc2d4d7
commit da4f5f2
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 7 deletions.
diff --git a/compiler/pom.xml b/compiler/pom.xml
@@ -103,7 +103,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.17.0</log4j2_version>
+                <log4j2_version>2.17.2</log4j2_version>
             </properties>
             <build>
                 <plugins>

diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
@@ -136,10 +136,10 @@
         <!-- Log libs -->
         <slf4j_version>1.7.25</slf4j_version>
         <jcl_version>1.2</jcl_version>
-        <log4j_version>1.2.16</log4j_version>
-        <logback_version>1.2.2</logback_version>
+        <log4j_version>1.2.17</log4j_version>
+        <logback_version>1.2.11</logback_version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.17.0</log4j2_version>
+        <log4j2_version>2.17.2</log4j2_version>
         <commons_io_version>2.7</commons_io_version>
 
         <embedded_redis_version>0.10.0</embedded_redis_version>

diff --git a/dubbo-spring-boot/pom.xml b/dubbo-spring-boot/pom.xml
@@ -42,7 +42,7 @@
         <spring-boot.version>2.3.1.RELEASE</spring-boot.version>
         <dubbo.version>${revision}</dubbo.version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.17.0</log4j2_version>
+        <log4j2_version>2.17.2</log4j2_version>
     </properties>
 
     <dependencyManagement>
@@ -192,4 +192,4 @@
             </plugin>
         </plugins>
     </build>
-</project>
+</project>
diff --git a/pom.xml b/pom.xml
@@ -323,7 +323,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.17.0</log4j2_version>
+                <log4j2_version>2.17.2</log4j2_version>
             </properties>
             <build>
                 <plugins>