upgrade log4j version to fix vulnerabilities and modify scope to test (…

…sofastack#492)
mathdata · Jul 29, 2020 · 406d34d · 406d34d
1 parent 5ca7134
commit 406d34d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/jraft-core/pom.xml b/jraft-core/pom.xml
@@ -70,18 +70,22 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
+            <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
+            <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-slf4j-impl</artifactId>
+            <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
+            <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.lmax</groupId>

diff --git a/pom.xml b/pom.xml
@@ -66,7 +66,7 @@
         <jsr305.version>3.0.2</jsr305.version>
         <junit.dep.version>4.8.2</junit.dep.version>
         <junit.version>4.12</junit.version>
-        <log4j.version>2.2</log4j.version>
+        <log4j.version>2.13.2</log4j.version>
         <main.user.dir>${user.dir}</main.user.dir>
         <metrics.version>4.0.2</metrics.version>
         <mockito.version>1.9.5</mockito.version>