Fixing log4j vulnerability

cmap · Dec 10, 2021 · 8f0e7bc · 8f0e7bc
1 parent 74cf488
commit 8f0e7bc
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 4 deletions.
diff --git a/sig_tools/+mortar/+containers/@S3/S3.m b/sig_tools/+mortar/+containers/@S3/S3.m
@@ -18,7 +18,8 @@
                       'commons-httpclient-3.1.jar';...
                       'commons-logging-1.1.1.jar';...
                       'java-xmlbuilder-0.4.jar';...
-                      'log4j-1.2.15.jar';...
+                      'log4j-api-2.15.0.jar';...
+                      'log4j-core-2.15.0.jar';...
                       'jets3t-0.8.1a.jar'};
     end
 

diff --git a/sig_tools/+mortar/+legacy/add_velocity_jar.m b/sig_tools/+mortar/+legacy/add_velocity_jar.m
@@ -10,7 +10,8 @@ function add_velocity_jar(isverbose)
     'commons-lang-2.6.jar';...
     'commons-logging-1.1.jar';...
     'jdom-1.0.jar';...
-    'log4j-1.2.12.jar';...
+    'log4j-api-2.15.0.jar';...
+    'log4j-core-2.15.0.jar';...
     'maven-ant-tasks-2.0.9.jar';...
     'oro-2.0.8.jar';...
     'servletapi-2.3.jar';...

diff --git a/sig_tools/js/package.json b/sig_tools/js/package.json
@@ -10,7 +10,7 @@
     "jsdoc": "~3.3.0-alpha5",
     "ink-docstrap": "~0.3.0-0",
     "docco": "~0.6.3",
-    "uglify-js": "~2.4.13",
+    "uglify-js": ">=2.6.0",
     "babyparse": "~0.4.1"
   },
   "devDependencies": {

diff --git a/sig_tools/util/add_velocity_jar.m b/sig_tools/util/add_velocity_jar.m
@@ -10,7 +10,8 @@ function add_velocity_jar(isverbose)
     'commons-lang-2.6.jar';...
     'commons-logging-1.1.jar';...
     'jdom-1.0.jar';...
-    'log4j-1.2.12.jar';...
+    'log4j-api-2.15.0.jar';...
+    'log4j-core-2.15.0.jar';...
     'maven-ant-tasks-2.0.9.jar';...
     'oro-2.0.8.jar';...
     'servletapi-2.3.jar';...