From 1c04d14ec5257cfb444583351f2e8dc37a953cc5 Mon Sep 17 00:00:00 2001 From: Igor Artamonov Date: Fri, 10 Dec 2021 17:26:05 -0500 Subject: [PATCH] problem: vulnerability in log4j < v2.15 (CVE-2021-44228) rel: https://www.lunasec.io/docs/blog/log4j-zero-day/ --- gradle/libs.versions.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 0ca9b0b8..d46dd0a7 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -3,7 +3,7 @@ detekt = "1.18.1" etherjar = "0.11.1" groovy = "2.5.14" protoc = "3.9.0" -slf4j = "1.7.25" +slf4j = "1.7.32" jackson = "2.11.0" grpc = "1.38.0" reactive-grpc = "1.2.0" @@ -99,7 +99,7 @@ reactor-grpc-stub = "com.salesforce.servicelibs:reactor-grpc-stub:1.2.0" slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" } slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" } slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" } -log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.11.1" +log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.15.0" snake-yaml = "org.yaml:snakeyaml:1.24"