未验证 提交 201e9346 编写于 作者: 昏暗槐花's avatar 昏暗槐花 提交者: GitHub

fix: Log4j Security Vulnerabilities (#1604)

update Log4j version to 2.17.0
- CVE-2021-45105 Fixed in Log4j 2.17.0 (Java 8)
- CVE-2021-45046 Fixed in Log4j 2.16.0 (Java 8)
上级 9ddd74b7
......@@ -34,10 +34,10 @@ configurations {
}
configurations.all {
// Aligning log4j dependency versions to 2.15.0
// Aligning log4j dependency versions to 2.17.0
resolutionStrategy.eachDependency { DependencyResolveDetails details ->
if (details.requested.group == 'org.apache.logging.log4j') {
details.useVersion '2.15.0'
details.useVersion '2.17.0'
}
}
}
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册