Skip to content

Commit 610ca31

Browse files
jbaierarootnix
andauthored
Bump Internal usages of log4j 2.10.0 to 2.15.0 (elastic#1817) (elastic#1820)
[CVE-2021-44228] Log4j versions prior to 2.15.0 are subject to a remote code execution vulnerability via the ldap JNDI parser. Log4J is distributed as part of Hadoop/Spark installations, and as such is not exported as a dependency of ES-Hadoop. This PR updates internal testing uses of the logging framework. Co-authored-by: rootnix <[email protected]>
1 parent fb93dcc commit 610ca31

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

gradle.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ org.gradle.java.installations.fromEnv=JAVA_HOME,RUNTIME_JAVA_HOME,JAVA15_HOME,JA
1010

1111
## Dependecies Version
1212
# Logging
13-
log4jVersion = 2.10.0
13+
log4jVersion = 2.15.0
1414

1515
# Hadoop versions
1616
hadoop3Version = 3.1.2

0 commit comments

Comments
 (0)