Skip to content

Commit c85d3d3

Browse files
Dilli-Babu-Godariagrawalreetika
authored andcommitted
Upgrade log4j-core and log4j-api dependencies
Upgraded org.apache.logging.log4j:log4j-core from 2.17.1 to 2.24.3 Upgraded org.apache.logging.log4j:log4j-api from 2.17.1 to 2.24.3 Fixes almost 25 CVEs.
1 parent 7d69b0a commit c85d3d3

File tree

3 files changed

+15
-6
lines changed

3 files changed

+15
-6
lines changed

pom.xml

+15
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,7 @@
103103
<air.test.thread-count>2</air.test.thread-count>
104104
<air.test.jvmsize>4g</air.test.jvmsize>
105105
<grpc.version>1.68.0</grpc.version>
106+
<dep.log4j.version>2.24.3</dep.log4j.version>
106107

107108
<air.javadoc.lint>-missing</air.javadoc.lint>
108109
</properties>
@@ -233,6 +234,20 @@
233234
<scope>import</scope>
234235
</dependency>
235236

237+
<dependency>
238+
<groupId>org.apache.logging.log4j</groupId>
239+
<artifactId>log4j-api</artifactId>
240+
<version>${dep.log4j.version}</version>
241+
<scope>runtime</scope>
242+
</dependency>
243+
244+
<dependency>
245+
<groupId>org.apache.logging.log4j</groupId>
246+
<artifactId>log4j-core</artifactId>
247+
<version>${dep.log4j.version}</version>
248+
<scope>runtime</scope>
249+
</dependency>
250+
236251
<dependency>
237252
<groupId>io.netty</groupId>
238253
<artifactId>netty-transport</artifactId>

presto-druid/pom.xml

-3
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,6 @@
1313

1414
<properties>
1515
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
16-
<dep.log4j.version>2.17.1</dep.log4j.version>
1716
</properties>
1817

1918
<repositories>
@@ -178,14 +177,12 @@
178177
<dependency>
179178
<groupId>org.apache.logging.log4j</groupId>
180179
<artifactId>log4j-api</artifactId>
181-
<version>${dep.log4j.version}</version>
182180
<scope>runtime</scope>
183181
</dependency>
184182

185183
<dependency>
186184
<groupId>org.apache.logging.log4j</groupId>
187185
<artifactId>log4j-core</artifactId>
188-
<version>${dep.log4j.version}</version>
189186
<scope>runtime</scope>
190187
</dependency>
191188

presto-elasticsearch/pom.xml

-3
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212

1313
<properties>
1414
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
15-
<dep.log4j.version>2.17.1</dep.log4j.version>
1615
<dep.elasticsearch.version>6.0.0</dep.elasticsearch.version>
1716
</properties>
1817

@@ -173,14 +172,12 @@
173172
<dependency>
174173
<groupId>org.apache.logging.log4j</groupId>
175174
<artifactId>log4j-api</artifactId>
176-
<version>${dep.log4j.version}</version>
177175
<scope>runtime</scope>
178176
</dependency>
179177

180178
<dependency>
181179
<groupId>org.apache.logging.log4j</groupId>
182180
<artifactId>log4j-core</artifactId>
183-
<version>${dep.log4j.version}</version>
184181
<scope>runtime</scope>
185182
</dependency>
186183

0 commit comments

Comments
 (0)