deps: log4j 2.17.1 (#3422)

kolea2 · web-flow · commit d78fc9165fa9 · 2022-01-04T14:54:19.000-05:00
diff --git a/pom.xml b/pom.xml
@@ -63,7 +63,7 @@ limitations under the License.
     <slf4j.version>1.7.25</slf4j.version>
     <commons-logging.version>1.2</commons-logging.version>
     <jsr305.version>3.0.2</jsr305.version>
-    <log4j2.version>2.17.0</log4j2.version>
+    <log4j2.version>2.17.1</log4j2.version>
 
     <!-- hbase dependency versions -->
     <hbase.version.1>1.4.12</hbase.version.1>
@@ -281,7 +281,7 @@ limitations under the License.
                 <!-- ban all log4j 2.x deps with CVEs -->
                 <bannedDependencies>
                   <excludes>
-                    <exclude>org.apache.logging.log4j:*:[2.0-alpha1,2.16.0]</exclude>
+                    <exclude>org.apache.logging.log4j:*:[2.0-alpha1,2.17.0]</exclude>
                   </excludes>
                 </bannedDependencies>
               </rules>
