CVE-related updates of pax-logging and log4j2.
<org.apache.aries.spifly.dynamic.bundle.version>1.3.2</org.apache.aries.spifly.dynamic.bundle.version>
<org.apache.aries.util.version>1.1.3</org.apache.aries.util.version>
<org.apache.felix.configadmin.version>1.9.16</org.apache.felix.configadmin.version>
- <org.apache.logging.log4j.version>2.13.3</org.apache.logging.log4j.version>
+ <org.apache.logging.log4j.version>2.17.1</org.apache.logging.log4j.version>
<org.apache.servicemix.bundles.ant.version>1.7.0_6</org.apache.servicemix.bundles.ant.version>
<org.apache.servicemix.bundles.aopalliance.version>1.0_6</org.apache.servicemix.bundles.aopalliance.version>
<org.apache.servicemix.bundles.aspectj.version>1.9.5_1</org.apache.servicemix.bundles.aspectj.version>
<osgi.core.version>6.0.0</osgi.core.version>
<pax-cdi.version>1.0.0.RC2</pax-cdi.version>
<pax-exam.version>4.13.1</pax-exam.version>
- <pax-logging.version>1.11.9</pax-logging.version>
+ <pax-logging.version>1.11.13</pax-logging.version>
<pax-url.version>2.6.2</pax-url.version>
<quartz.version>2.3.2</quartz.version>
<rome.version>1.15.0</rome.version>
