Upgrade GWC to a log4j version that does not support RCE (all network…

… related appenders have been removed, as well as server socket related classes)
GeoWebCache · Dec 14, 2021 · 870bde9 · 870bde9
1 parent f176eef
commit 870bde9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/geowebcache/pom.xml b/geowebcache/pom.xml
@@ -60,7 +60,7 @@
     <commons-fileupload.version>1.3.3</commons-fileupload.version>
     <guava.version>27.0-jre</guava.version>
     <jsr305.version>3.0.1</jsr305.version>
-    <log4j.version>1.2.14</log4j.version>
+    <log4j.version>1.2.17.norce</log4j.version>
     <h2.version>1.1.119</h2.version>
     <postgresql.version>42.2.14</postgresql.version>
     <oracle.version></oracle.version>