[BEAM-13490] Bump up Apache log4j2 to 2.17.0 due to the vulnerability

• Type: Improvement
• Status: Resolved
• Priority: P1
• Resolution: Fixed
• Affects Version/s: 2.34.0
• Fix Version/s: 2.35.0
• Component/s: sdk-java-core
• Assignee: Unassigned
• Reporter: Luning Wang
• Created: 19/Dec/21 15:54
• Updated: 24/Dec/21 07:03
• Resolved: 24/Dec/21 04:17

Description

https://logging.apache.org/log4j/2.x/security.html

 

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105

Issue Links

• links to: GitHub Pull Request #16276