[JCLOUDS-1601] upgrade log4j due to security issue

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.6.0
• Component/s: jclouds-core
• Assignee: Andrew Gaul
• Reporter: PJ Fanning
• Created: 30/Mar/22 13:05
• Updated: 18/Apr/22 13:08
• Resolved: 18/Apr/22 13:08

Description

There is a CVE against v2.17.0

https://github.com/apache/jclouds/blob/master/project/pom.xml#L239

https://logging.apache.org/log4j/2.x/security.html

Also, logback version is old (next line in pom)

https://mvnrepository.com/artifact/ch.qos.logback/logback-core