Resolve log4j (Java8) vulnerability in Simple Java Mail's CLI module

Question

bbottema opened this issue 2 years ago · 2 comments

Log4j was already updated for the Java7 version in #365, but since Simple Java Mail is switching to Java8, we need to update it again to the latest.

Answer 1 · 2022-01-02T15:31:02.000Z

Updated parent POMs, which update the log4j dependency to 2.17.0.

Answer 2 · 2022-01-02T20:59:14.000Z

Released in 7.0.0.