Update log4j
Change-Id: Ic1fe5378f2a92b9e86b929f12b64b8b0cb124f53
diff --git a/Changes b/Changes
index 6a82798..2e6d1a4 100644
--- a/Changes
+++ b/Changes
@@ -1,6 +1,9 @@
-0.60.1 2021-12-16
+0.60.1 2021-12-17
- [feature] Added vc loading from classpath (margaretha)
- [cleanup] Fixed missing VC to cleanup in VC Cache (margaretha)
+ - [security] Updated log4j due to CVE-2021-45046 (diewald)
+
+ !!! This is a security fix - please update!
0.60 2021-12-10
- [feature] Implemented a new cache with on disk
diff --git a/pom.xml b/pom.xml
index 685317b..a081e45 100644
--- a/pom.xml
+++ b/pom.xml
@@ -60,9 +60,9 @@
<properties>
<java.version>1.8</java.version>
- <jersey.version>3.0.2</jersey.version>
- <jackson.version>2.12.4</jackson.version>
- <log4j.version>2.15.0</log4j.version>
+ <jersey.version>3.0.3</jersey.version>
+ <jackson.version>[2.12.4,)</jackson.version>
+ <log4j.version>[2.16.0,)</log4j.version>
<lucene.version>5.0.0</lucene.version>
<cobertura.version>2.7</cobertura.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>