[PLUTO-796] Upgrade to Log4j 2.17.1 due to CVE-2021-45105

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.2
• Component/s: demo portlets, maven archetypes
• Assignee: Neil Griffin (Inactive)
• Reporter: Neil Griffin (Inactive)
• Created: 06/Jan/22 01:20
• Updated: 06/Jan/22 01:28
• Resolved: 06/Jan/22 01:28

Description

This task involves upgrading due to CVE-2021-45105. Although the vulnerability is fixed in 2.17.0, version 2.17.1 is the latest version at the time of this writing.