commit e84d0d4f1f3d2f80be7be068a1a481bf0620336f
author Neha Pawar <neha.pawar18@gmail.com> Tue Dec 14 15:30:19 2021 -0800
committer Xiang Fu <xiangfu.1024@gmail.com> Fri Dec 17 14:42:51 2021 -0800
tree 25017b930bb25ad4ea090f20214633a7270a5567
parent c4ceff06d21fc1c1b88469a8dbae742a4b609808

Upgrade log4j to 2.16.0 for CVE-2021-45046 (#7903)

LICENSE-binary

diff --git a/LICENSE-binary b/LICENSE-binary
index a9ad999..e3bd47a 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -336,10 +336,10 @@
 org.apache.kafka:kafka-clients:2.0.0
 org.apache.kafka:kafka_2.10:0.9.0.1
 org.apache.kafka:kafka_2.11:2.0.0
-org.apache.logging.log4j:log4j-1.2-api:2.11.2
-org.apache.logging.log4j:log4j-api:2.11.2
-org.apache.logging.log4j:log4j-core:2.11.2
-org.apache.logging.log4j:log4j-slf4j-impl:2.11.2
+org.apache.logging.log4j:log4j-1.2-api:2.16.0
+org.apache.logging.log4j:log4j-api:2.16.0
+org.apache.logging.log4j:log4j-core:2.16.0
+org.apache.logging.log4j:log4j-slf4j-impl:2.16.0
 org.apache.lucene:lucene-analyzers-common:8.2.0
 org.apache.lucene:lucene-core:8.2.0
 org.apache.lucene:lucene-queries:8.2.0

pom.xml

diff --git a/pom.xml b/pom.xml
index 42010e6..4ad5af9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -145,7 +145,7 @@
     <snappy-java.version>1.1.1.7</snappy-java.version>
     <zstd-jni.version>1.4.9-5</zstd-jni.version>
     <lz4-java.version>1.7.1</lz4-java.version>
-    <log4j.version>2.11.2</log4j.version>
+    <log4j.version>2.16.0</log4j.version>
     <netty.version>4.1.54.Final</netty.version>
     <reactivestreams.version>1.0.3</reactivestreams.version>
     <jts.version>1.16.1</jts.version>