Update log4j to v2.17 (#1766)

addressing the denial of service issue
broadinstitute · Dec 20, 2021 · 71213e7 · 71213e7
1 parent 889be49
commit 71213e7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -92,8 +92,8 @@ dependencies {
     compile 'commons-lang:commons-lang:2.6'
     compile 'com.github.samtools:htsjdk:' + htsjdkVersion
     compile 'org.broadinstitute:barclay:4.0.2'
-    compile 'org.apache.logging.log4j:log4j-api:2.16.0'
-    compile 'org.apache.logging.log4j:log4j-core:2.16.0'
+    compile 'org.apache.logging.log4j:log4j-api:2.17.0'
+    compile 'org.apache.logging.log4j:log4j-core:2.17.0'
     compileOnly(googleNio) {
         transitive = false
     }