Uploaded image for project: 'Policy Framework'
  1. Policy Framework
  2. POLICY-2553 Upgrade Vulnerable Direct Dependencies
  3. POLICY-2623

Upgrade log4j

    XMLWordPrintable

Details

    • Sub-task
    • Status: Closed
    • Medium
    • Resolution: Done
    • None
    • Guilin Release
    • None
    • Policy 6/8-6/19, Policy 6/23-7/06

    Description

      In policy/common log4j is inherited by all the other policy projects. Task is to upgrade to:

       

      log4j : 1.2.17 CVE-2019-17571 9 2.13.1 (log4j-core)

       

      eg Remove that dependency and use log4j-core

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            uj426b Utkarsh Jauhari
            pdragosh Pamela Dragosh
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: