Upgraded the log4j-version. To mitigate any security problems found i…

…n 1.* version of that.
Vastra-Gotalandsregionen · Apr 22, 2022 · 1ee7ca7 · 1ee7ca7
1 parent d85fec1
commit 1ee7ca7
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 21 deletions.
diff --git a/core-bc/modules/portlet/pom.xml b/core-bc/modules/portlet/pom.xml
@@ -199,16 +199,6 @@
       <scope>test</scope>
     </dependency>
 
-<!--    <dependency>
-      <groupId>org.hibernate</groupId>
-      <artifactId>hibernate-validator</artifactId>
-      <version>4.1.0.Final</version>
-    </dependency>-->
-    <dependency>
-      <groupId>org.hibernate</groupId>
-      <artifactId>hibernate-validator</artifactId>
-      <version>6.0.13.Final</version>
-    </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-tx</artifactId>
@@ -233,22 +223,13 @@
       <scope>compile</scope>
     </dependency>
 
-<!--    <dependency>
-      <groupId>com.fasterxml.jackson.core</groupId>
-      <artifactId>jackson-core</artifactId>
-      <version>2.8.10</version>
-    </dependency>-->
-<!--    <dependency>
-      <groupId>com.fasterxml.jackson.core</groupId>
-      <artifactId>jackson-databind</artifactId>
-      <version>2.8.7</version>
-    </dependency>-->
     <dependency>
       <groupId>postgresql</groupId>
       <artifactId>postgresql</artifactId>
       <version>8.4-702.jdbc4</version>
       <scope>test</scope>
     </dependency>
+
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-log4j12</artifactId>

diff --git a/pom.xml b/pom.xml
@@ -9,7 +9,7 @@
   <parent>
     <groupId>se.vgregion.common</groupId>
     <artifactId>profile-open</artifactId>
-    <version>2.15</version>
+    <version>2.17-SNAPSHOT</version>
   </parent>
 
   <groupId>se.vgregion.iFeed</groupId>
@@ -155,6 +155,9 @@
     <!--<liferay.version>6.2.10.15</liferay.version>-->
     <!--<liferay.version>2.46.0</liferay.version>-->
     <hibernate.version>5.4.8.Final</hibernate.version>
+
+    <slf4j.version>2.0.0-alpha7</slf4j.version>
+    <log4j.version>2.17.2</log4j.version>
   </properties>
 
   <!--NB! SCM config below assumes system name equals VGR subversion/googlecode project name! -->
@@ -188,6 +191,14 @@
       <artifactId>activation</artifactId>
       <version>1.1.1</version>
     </dependency>
+
+    <!-- https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core -->
+    <dependency>
+      <groupId>org.apache.logging.log4j</groupId>
+      <artifactId>log4j-core</artifactId>
+      <version>2.17.2</version>
+    </dependency>
+
   </dependencies>
 
 </project>