Update application.properties

.gitignore

@@ -36,3 +36,4 @@ overridedb.*
 davos.log
 src/main/resources/application.properties
 src/main/resources/log4j2.xml
+.vscode/

README.md

@@ -38,6 +38,8 @@ Finally, schedules can be started or stopped at any point, using the schedules l
 ![https://raw.githubusercontent.com/linuxserver/davos/master/docs/list.PNG](https://raw.githubusercontent.com/linuxserver/davos/master/docs/list.PNG)
 
 # Changelog
+- **2.2.2**
+  - Updated log4j dependency to 2.16.0, accounting for CVE-2021-44228
 
 - **2.2.1**
   - Fixed bug where lastRunTime got reset whenever a change was made to a schedule.

build.gradle

@@ -61,9 +61,9 @@ dependencies {
     compile 'org.springframework.boot:spring-boot-starter-data-jpa'
     compile 'org.springframework.boot:spring-boot-starter-jdbc'
     
-    compile 'org.apache.logging.log4j:log4j-api:2.4.1'
+    compile 'org.apache.logging.log4j:log4j-api:2.16.0'
-    compile 'org.apache.logging.log4j:log4j-core:2.4.1'
+    compile 'org.apache.logging.log4j:log4j-core:2.16.0'
-    compile 'org.apache.logging.log4j:log4j-slf4j-impl:2.4.1'
+    compile 'org.apache.logging.log4j:log4j-slf4j-impl:2.16.0'
 	
 	compile 'com.jcraft:jsch:0.1.50'
     compile 'joda-time:joda-time:2.3'

conf/local/application.properties

@@ -1 +1 @@
-davos.version=2.2.1
+davos.version=2.2.2

conf/release/application.properties

@@ -4,4 +4,4 @@ spring.datasource.password=sa
 spring.datasource.driverClassName=org.h2.Driver
 spring.jpa.hibernate.ddl-auto=update
 
-davos.version=2.2.1
+davos.version=2.2.2

version.txt

@@ -1 +1 @@
-2.2.1
+2.2.2