Update org.apache.logging.log4j to 2.17.0
This release mitigates
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105
Release notes:
https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.0
Change-Id: Ie7de210150174d07518960a3deb679786103e7c3
diff --git a/logging/org.apache.logging.log4j_2.16.0/.project b/logging/org.apache.logging.log4j_2.17.0/.project
similarity index 79%
rename from logging/org.apache.logging.log4j_2.16.0/.project
rename to logging/org.apache.logging.log4j_2.17.0/.project
index 6710efe..64f5d9f 100644
--- a/logging/org.apache.logging.log4j_2.16.0/.project
+++ b/logging/org.apache.logging.log4j_2.17.0/.project
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<projectDescription>
- <name>org.apache.logging.log4j_2.16.0</name>
+ <name>org.apache.logging.log4j_2.17.0</name>
<comment></comment>
<projects>
</projects>
diff --git a/logging/org.apache.logging.log4j_2.16.0/osgi.bnd b/logging/org.apache.logging.log4j_2.17.0/osgi.bnd
similarity index 100%
rename from logging/org.apache.logging.log4j_2.16.0/osgi.bnd
rename to logging/org.apache.logging.log4j_2.17.0/osgi.bnd
diff --git a/logging/org.apache.logging.log4j_2.16.0/pom.xml b/logging/org.apache.logging.log4j_2.17.0/pom.xml
similarity index 89%
rename from logging/org.apache.logging.log4j_2.16.0/pom.xml
rename to logging/org.apache.logging.log4j_2.17.0/pom.xml
index 6a71c1c..841041d 100644
--- a/logging/org.apache.logging.log4j_2.16.0/pom.xml
+++ b/logging/org.apache.logging.log4j_2.17.0/pom.xml
@@ -8,19 +8,19 @@
<version>1.0.0-SNAPSHOT</version>
</parent>
<artifactId>org.apache.logging.log4j</artifactId>
- <version>2.16.0-SNAPSHOT</version>
+ <version>2.17.0-SNAPSHOT</version>
<packaging>eclipse-bundle-recipe</packaging>
<name>Apache Log4j 2</name>
<dependencies>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
- <version>2.16.0</version>
+ <version>2.17.0</version>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
- <version>2.16.0</version>
+ <version>2.17.0</version>
</dependency>
</dependencies>
</project>
diff --git a/logging/org.apache.logging.log4j_2.16.0/src/eclipse/ip_log.xml b/logging/org.apache.logging.log4j_2.17.0/src/eclipse/ip_log.xml
similarity index 85%
rename from logging/org.apache.logging.log4j_2.16.0/src/eclipse/ip_log.xml
rename to logging/org.apache.logging.log4j_2.17.0/src/eclipse/ip_log.xml
index 3eca5e0..dd5da73 100644
--- a/logging/org.apache.logging.log4j_2.16.0/src/eclipse/ip_log.xml
+++ b/logging/org.apache.logging.log4j_2.17.0/src/eclipse/ip_log.xml
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<ip_log version="1.0">
- <project id="org.apache.logging.log4j" version="2.16.0" status="done">
+ <project id="org.apache.logging.log4j" version="2.17.0" status="done">
<info>
<name>Apache Log4j 2</name>
<repository>scm:git:git.eclipse.org:/gitroot/orbit/recipes.git</repository>
@@ -12,20 +12,20 @@
<company>SAP SE</company>
</contact>
<legal>
- <clearlydefined url="https://clearlydefined.io/definitions/sourcearchive/mavencentral/org.apache.logging.log4j/log4j-api/2.16.0"/>
+ <clearlydefined url="https://clearlydefined.io/definitions/sourcearchive/mavencentral/org.apache.logging.log4j/log4j-api/2.17.0"/>
<license>
<name>Apache License, 2.0</name>
<reference>http://www.apache.org/licenses/LICENSE-2.0.txt</reference>
</license>
- <package>log4j-api-2.16.0.jar</package>
+ <package>log4j-api-2.17.0.jar</package>
</legal>
<legal>
- <clearlydefined url="https://clearlydefined.io/definitions/sourcearchive/mavencentral/org.apache.logging.log4j/log4j-core/2.16.0"/>
+ <clearlydefined url="https://clearlydefined.io/definitions/sourcearchive/mavencentral/org.apache.logging.log4j/log4j-core/2.17.0"/>
<license>
<name>Apache License, 2.0</name>
<reference>http://www.apache.org/licenses/LICENSE-2.0.txt</reference>
</license>
- <package>log4j-core-2.16.0.jar</package>
+ <package>log4j-core-2.17.0.jar</package>
</legal>
</project>
</ip_log>
diff --git a/logging/org.apache.logging.log4j_2.16.0/src/main/resources/OSGI-INF/l10n/bundle.properties b/logging/org.apache.logging.log4j_2.17.0/src/main/resources/OSGI-INF/l10n/bundle.properties
similarity index 100%
rename from logging/org.apache.logging.log4j_2.16.0/src/main/resources/OSGI-INF/l10n/bundle.properties
rename to logging/org.apache.logging.log4j_2.17.0/src/main/resources/OSGI-INF/l10n/bundle.properties
diff --git a/logging/org.apache.logging.log4j_2.16.0/src/main/resources/about.html b/logging/org.apache.logging.log4j_2.17.0/src/main/resources/about.html
similarity index 100%
rename from logging/org.apache.logging.log4j_2.16.0/src/main/resources/about.html
rename to logging/org.apache.logging.log4j_2.17.0/src/main/resources/about.html
diff --git a/logging/org.apache.logging.log4j_2.16.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt b/logging/org.apache.logging.log4j_2.17.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
similarity index 100%
rename from logging/org.apache.logging.log4j_2.16.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
rename to logging/org.apache.logging.log4j_2.17.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
diff --git a/logging/pom.xml b/logging/pom.xml
index a6c2be2..8c92c7f 100644
--- a/logging/pom.xml
+++ b/logging/pom.xml
@@ -27,7 +27,7 @@
<module>ch.qos.logback.classic_1.2.3</module>
<module>ch.qos.logback.slf4j_1.2.3</module>
<module>org.jboss.logging_3.3.2</module>
- <module>org.apache.logging.log4j_2.16.0</module>
+ <module>org.apache.logging.log4j_2.17.0</module>
</modules>
</project>
diff --git a/releng/aggregationfeature/feature.xml b/releng/aggregationfeature/feature.xml
index 7a09480..9fad4e3 100644
--- a/releng/aggregationfeature/feature.xml
+++ b/releng/aggregationfeature/feature.xml
@@ -196,7 +196,7 @@
<plugin id="org.freemarker" version="2.3.22.qualifier"/>
- <plugin id="org.apache.logging.log4j" version="2.16.0.qualifier"/>
+ <plugin id="org.apache.logging.log4j" version="2.17.0.qualifier"/>
<!-- ASM -->
<plugin id="org.objectweb.asm" version="9.1.0.qualifier"/>
