This is an automated email from the ASF dual-hosted git repository.
struberg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openwebbeans-meecrowave.git
The following commit(s) were added to refs/heads/master by this push:
new 4a510fb MEECROWAVE-304 upgrade to log4j 2.15.0
4a510fb is described below
commit 4a510fbb251cf99b2e39e1a072af0229c5cfd8be
Author: Mark Struberg <[email protected]>
AuthorDate: Sun Dec 12 21:28:08 2021 +0100
MEECROWAVE-304 upgrade to log4j 2.15.0
This prevents code injection via JNDI
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 1af2724..ff2abe2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -55,7 +55,7 @@
<openwebbeans.version>2.0.23</openwebbeans.version>
<cxf.version>3.4.5</cxf.version>
<johnzon.version>1.2.14</johnzon.version>
- <log4j2.version>2.14.1</log4j2.version>
+ <log4j2.version>2.15.0</log4j2.version>
<deltaspike.version>1.8.2</deltaspike.version>
<jaxb.version>2.2.11</jaxb.version>
<openjpa.version>3.2.0</openjpa.version>
