[MRM-2027] Update log4j2 to 2.17.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.6
• Fix Version/s: 2.2.7
• Assignee: Martin Schreier
• Reporter: Martin Schreier
• Created: 18/Dec/21 11:34
• Updated: 18/Dec/21 11:34
• Resolved: 18/Dec/21 11:34

Description

There is another vulnerability for log4j2

CVE-2021-45105

It is considered as low risk for archiva, should work only when users change the log configuration. But we add this update for the next release.