yetangitu/airsonic
1
0
Fork 0
mirror of https://github.com/airsonic/airsonic.git synced 2025-10-03 09:49:17 +02:00
Code Issues Releases Wiki Activity

Temporarily update log4j dependency to fix CVE-2020-9488

Browse source
This commit is contained in:
François-Xavier Thomas 2020-05-01 13:43:34 +02:00
parent 8e21e849c2
commit 6ab03e88a3
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
pom.xml
View file

@ -90,6 +90,18 @@
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<!-- Spring Boot 2.2.6 doesn't update log4j yet, fixes CVE -->
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>2.13.2</version>
</dependency>
<dependency>
<!-- Spring Boot 2.2.6 doesn't update log4j yet, fixes CVE -->
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-to-slf4j</artifactId>
<version>2.13.2</version>
</dependency>
<dependency>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>