problem: vulnerability in log4j < v2.15 (CVE-2021-44228)

rel: https://www.lunasec.io/docs/blog/log4j-zero-day/
This commit is contained in:
Igor Artamonov
2021-12-10 17:26:05 -05:00
parent b17304b201
commit 1c04d14ec5

View File

@@ -3,7 +3,7 @@ detekt = "1.18.1"
etherjar = "0.11.1"
groovy = "2.5.14"
protoc = "3.9.0"
slf4j = "1.7.25"
slf4j = "1.7.32"
jackson = "2.11.0"
grpc = "1.38.0"
reactive-grpc = "1.2.0"
@@ -99,7 +99,7 @@ reactor-grpc-stub = "com.salesforce.servicelibs:reactor-grpc-stub:1.2.0"
slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" }
slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" }
slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" }
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.11.1"
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.15.0"
snake-yaml = "org.yaml:snakeyaml:1.24"