Merge pull request #5910 from cbeams/avoid-log4j-0day

Avoid Log4J "Log4Shell" exploit
bisq-network · Dec 10, 2021 · a592266 · a592266
2 parents 7a6ae2b + 55becc5
commit a592266
Show file tree

Hide file tree

Showing 2 changed files with 369 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -574,6 +574,8 @@ configure(project(':monitor')) {
 configure(project(':pricenode')) {
     apply plugin: "org.springframework.boot"
 
+    apply plugin: 'io.spring.dependency-management'
+
     mainClassName = 'bisq.price.Main'
 
     version = file("src/main/resources/version.txt").text.trim()
@@ -582,6 +584,8 @@ configure(project(':pricenode')) {
         "Implementation-Title": project.name,
         "Implementation-Version": version)
 
+    ext['log4j2.version'] = '2.15.0'
+
     dependencies {
         implementation project(":common")
         implementation project(":core")