search

WISVCH / payments

Payment provider wrapper
https://ch.tudelft.nl/payments/
MIT License
0 stars 1 forks source link

Fix the log4j security issue #88

Closed julian9499 closed 2 years ago

julian9499 commented 2 years ago

https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot

praseodym commented 2 years ago

As with https://github.com/WISVCH/events/pull/361, I don't think this works

Fastjur commented 2 years ago

Do we think it will work like this? I wasn't sure if in github.com/WISVCH/events it was fixed like this, but I have updated this PR to add the ext['log4j2.version'] = '2.15.0' line.

Could one of you confirm this and merge if it is the case.

praseodym commented 2 years ago

Yes this should work, but the bigger problem is that the CI/CD is currently broken and the app needs an update to Spring Boot 2 to fix that.