Skip to content
This repository has been archived by the owner on Dec 13, 2023. It is now read-only.

Commit

Permalink
update log4j to 2.17 to avoid DoS vulnerability (#2659)
Browse files Browse the repository at this point in the history 
* update log4j to 2.17 to avoid DoS vulnerability

* generateLock and saveLock

Co-authored-by: romain amichaud <[email protected]>
  • Loading branch information
@ermineaweb @romami1
ermineaweb and romami1 authored Dec 20, 2021
1 parent 1c39f15 commit c1d68dc
Show file tree
Hide file tree
Showing 25 changed files with 3,276 additions and 267 deletions.
229 changes: 229 additions & 0 deletions annotations-processor/dependencies.lock
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,229 @@
{
"annotationProcessor": {
"org.springframework.boot:spring-boot-configuration-processor": {
"locked": "2.3.12.RELEASE"
}
},
"compileClasspath": {
"com.github.jknack:handlebars": {
"locked": "4.0.7"
},
"com.google.guava:guava": {
"locked": "25.1-jre"
},
"com.google.protobuf:protobuf-java": {
"locked": "3.5.1"
},
"com.netflix.conductor:conductor-annotations": {
"project": true
},
"com.squareup:javapoet": {
"locked": "1.11.1"
},
"javax.annotation:javax.annotation-api": {
"locked": "1.3.2"
},
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
}
},
"exampleCompileClasspath": {
"com.netflix.conductor:conductor-annotations": {
"project": true
}
},
"exampleRuntimeClasspath": {
"com.netflix.conductor:conductor-annotations": {
"project": true
},
"org.apache.logging.log4j:log4j-api": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.13.3"
},
"org.apache.logging.log4j:log4j-core": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.13.3"
},
"org.apache.logging.log4j:log4j-jul": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.13.3"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.13.3"
},
"org.apache.logging.log4j:log4j-web": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.13.3"
}
},
"runtimeClasspath": {
"com.github.jknack:handlebars": {
"locked": "4.0.7"
},
"com.google.guava:guava": {
"locked": "25.1-jre"
},
"com.google.protobuf:protobuf-java": {
"locked": "3.5.1"
},
"com.netflix.conductor:conductor-annotations": {
"project": true
},
"com.squareup:javapoet": {
"locked": "1.11.1"
},
"javax.annotation:javax.annotation-api": {
"locked": "1.3.2"
},
"org.apache.logging.log4j:log4j-api": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
}
},
"testCompileClasspath": {
"com.github.jknack:handlebars": {
"locked": "4.0.7"
},
"com.google.guava:guava": {
"locked": "25.1-jre"
},
"com.google.protobuf:protobuf-java": {
"locked": "3.5.1"
},
"com.netflix.conductor:conductor-annotations": {
"project": true
},
"com.squareup:javapoet": {
"locked": "1.11.1"
},
"javax.annotation:javax.annotation-api": {
"locked": "1.3.2"
},
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
},
"org.springframework.boot:spring-boot-starter-log4j2": {
"locked": "2.3.12.RELEASE"
},
"org.springframework.boot:spring-boot-starter-test": {
"locked": "2.3.12.RELEASE"
}
},
"testRuntimeClasspath": {
"com.github.jknack:handlebars": {
"locked": "4.0.7"
},
"com.google.guava:guava": {
"locked": "25.1-jre"
},
"com.google.protobuf:protobuf-java": {
"locked": "3.5.1"
},
"com.netflix.conductor:conductor-annotations": {
"project": true
},
"com.squareup:javapoet": {
"locked": "1.11.1"
},
"javax.annotation:javax.annotation-api": {
"locked": "1.3.2"
},
"org.apache.logging.log4j:log4j-api": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"firstLevelTransitive": [
"com.netflix.conductor:conductor-annotations"
],
"locked": "2.17.0"
},
"org.springframework.boot:spring-boot-starter-log4j2": {
"locked": "2.3.12.RELEASE"
},
"org.springframework.boot:spring-boot-starter-test": {
"locked": "2.3.12.RELEASE"
}
}
}
87 changes: 87 additions & 0 deletions annotations/dependencies.lock
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,87 @@
{
"annotationProcessor": {
"org.springframework.boot:spring-boot-configuration-processor": {
"locked": "2.3.12.RELEASE"
}
},
"compileClasspath": {
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
}
},
"runtimeClasspath": {
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
}
},
"testCompileClasspath": {
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
},
"org.springframework.boot:spring-boot-starter-log4j2": {
"locked": "2.3.12.RELEASE"
},
"org.springframework.boot:spring-boot-starter-test": {
"locked": "2.3.12.RELEASE"
}
},
"testRuntimeClasspath": {
"org.apache.logging.log4j:log4j-api": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-core": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-jul": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-slf4j-impl": {
"locked": "2.17.0"
},
"org.apache.logging.log4j:log4j-web": {
"locked": "2.17.0"
},
"org.springframework.boot:spring-boot-starter-log4j2": {
"locked": "2.3.12.RELEASE"
},
"org.springframework.boot:spring-boot-starter-test": {
"locked": "2.3.12.RELEASE"
}
}
}
Loading

0 comments on commit c1d68dc

Please sign in to comment.