Uploaded image for project: 'Policy Framework'
  1. Policy Framework
  2. POLICY-2553 Upgrade Vulnerable Direct Dependencies
  3. POLICY-2623

Upgrade log4j

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Done
    • Icon: Medium Medium
    • Guilin Release
    • None
    • None
    • Policy 6/8-6/19, Policy 6/23-7/06

      In policy/common log4j is inherited by all the other policy projects. Task is to upgrade to:

       

      log4j : 1.2.17 CVE-2019-17571 9 2.13.1 (log4j-core)

       

      eg Remove that dependency and use log4j-core

       

            uj426b uj426b
            pdragosh pdragosh
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: