forked from phoedos/pmd
Bump log4j to 2.16.0
Update log4 to harden defaults. Based on CVE-2021-45046 the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. for more details CVE-2021-45046 (https://nvd.nist.gov/vuln/detail/CVE-2021-45046)
This commit is contained in:
@ -12,7 +12,7 @@
|
||||
</parent>
|
||||
|
||||
<properties>
|
||||
<log4j.version>2.15.0</log4j.version>
|
||||
<log4j.version>2.16.0</log4j.version>
|
||||
</properties>
|
||||
|
||||
<build>
|
||||
|
Reference in New Issue
Block a user