Merge pull request apache#521 from Chromico/master

Update log4j to 2.17.1 to address CVE-2021-44832.
schsli · Dec 30, 2021 · 767f40b · 767f40b
2 parents 74f1f86 + 0b5670f
commit 767f40b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -111,7 +111,7 @@
         <asm.version>9.2</asm.version>
         <jackson.version>2.10.5</jackson.version>
         <jackson-databind.version>2.10.5.1</jackson-databind.version>
-        <log4j2.version>2.17.0</log4j2.version>
+        <log4j2.version>2.17.1</log4j2.version>
         <ognl.version>3.2.20</ognl.version>
         <slf4j.version>1.7.32</slf4j.version>
         <spring.platformVersion>4.3.30.RELEASE</spring.platformVersion>