problem: vulnerability in log4j < v2.15 (CVE-2021-44228)

rel: https://www.lunasec.io/docs/blog/log4j-zero-day/
emeraldpay · Dec 11, 2021 · 92ae6c4 · 92ae6c4
1 parent 5ebd23a
commit 92ae6c4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -3,7 +3,7 @@ detekt = "1.18.1"
 etherjar = "0.11.1"
 groovy = "2.5.14"
 protoc = "3.9.0"
-slf4j = "1.7.25"
+slf4j = "1.7.32"
 jackson = "2.11.0"
 grpc = "1.38.0"
 reactive-grpc = "1.2.0"
@@ -99,7 +99,7 @@ reactor-grpc-stub = "com.salesforce.servicelibs:reactor-grpc-stub:1.2.0"
 slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" }
 slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" }
 slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" }
-log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.11.1"
+log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.15.0"
 
 snake-yaml = "org.yaml:snakeyaml:1.24"