From bf3f11147f73b0d94de3e1e7985bbcddd872f745 Mon Sep 17 00:00:00 2001
From: anhefti <andreas.hefti@let.ethz.ch>
Date: Mon, 13 Dec 2021 13:43:11 +0100
Subject: [PATCH] preventively fix CVE-2021-44228 and update to log4J 2.15.0

---
 pom.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pom.xml b/pom.xml
index 87c5557a..9b6f633c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,6 +23,9 @@
     <revision>${sebserver-version}</revision>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
+    
+    <!-- Fix CVE-2021-44228 : https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot -->
+    <log4j2.version>2.15.0</log4j2.version> 
   </properties>