Bump log4j to 2.16.0

Update log4 to harden defaults.
 Based on CVE-2021-45046 the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations.
for more details CVE-2021-45046 (https://nvd.nist.gov/vuln/detail/CVE-2021-45046)
This commit is contained in:
Sergey Nuyanzin
2021-12-15 12:08:51 +01:00
committed by GitHub
parent ae04e0a4b5
commit 76ccefa0f2

View File

@ -12,7 +12,7 @@
</parent>
<properties>
<log4j.version>2.15.0</log4j.version>
<log4j.version>2.16.0</log4j.version>
</properties>
<build>