commit 802d66de2c25647bc8f2d7cc3449b5b9d0488bad
author Przemyslaw Waliszewski <pwaliszewski@gmail.com> Thu Dec 23 14:10:51 2021 +0100
committer Przemyslaw Waliszewski <pwaliszewski@gmail.com> Thu Dec 23 14:10:51 2021 +0100
tree f08c50b58ac7433ef317e1002018af6f83d6a4bb
parent c1021c60147bfcaef24719aba997f7c715deb906
parent 93cd08fdf8a994047cd53e2c441f3042845bbe84

Merge branch 'stable-2.14' into stable-2.15

* stable-2.14:
  Update log4j2 version to 2.17.0
  Update log4j2 version to 2.16.0 to fix CVE-2021-44228

Change-Id: Ic469989d13fdf3017966783b275a8b94075b4023

external_plugin_deps.bzl

diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index ceca8a6..7d9fdd6 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -52,24 +52,24 @@
         sha1 = "31cdf122e000322e9efcb38913e9ab07825b17ef",
     )
 
-    LOG4J2_VERS = "2.11.1"
+    LOG4J2_VERS = "2.17.0"
 
     maven_jar(
         name = "log4j-slf4j-impl",
         artifact = "org.apache.logging.log4j:log4j-slf4j-impl:" + LOG4J2_VERS,
-        sha1 = "4b41b53a3a2d299ce381a69d165381ca19f62912",
+        sha1 = "1ec25ce0254749c94549ea9c3cea34bd0488c9c6",
     )
 
     maven_jar(
         name = "log4j-core",
         artifact = "org.apache.logging.log4j:log4j-core:" + LOG4J2_VERS,
-        sha1 = "592a48674c926b01a9a747c7831bcd82a9e6d6e4",
+        sha1 = "fe6e7a32c1228884b9691a744f953a55d0dd8ead",
     )
 
     maven_jar(
         name = "log4j-api",
         artifact = "org.apache.logging.log4j:log4j-api:" + LOG4J2_VERS,
-        sha1 = "268f0fe4df3eefe052b57c87ec48517d64fb2a10",
+        sha1 = "bbd791e9c8c9421e45337c4fe0a10851c086e36c",
     )
 
     maven_jar(