From a33488523b088f8c2d8323340c3e26039e74858b Mon Sep 17 00:00:00 2001
From: Takara Baumbach <takara.baumbach@heigit.org>
Date: Mon, 3 Jan 2022 10:49:06 +0100
Subject: [PATCH] update log4j version to address CVE

---
 CHANGELOG.md                       | 8 +++++++-
 openrouteservice-api-tests/pom.xml | 2 +-
 openrouteservice/pom.xml           | 8 ++++----
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c1edef96e8..699d0a4d1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,6 +34,11 @@ RELEASING:
  -->
 
 ## [Unreleased]
+## [6.6.4] - 2022-01-03
+### Fixed
+- update log4j to version 2.17.1
+- switch to GH fork version v0.13.15-4 
+
 ## [6.6.3] - 2021-12-15
 ### Fixed
 - switch to GH fork version v0.13.15-3 to address updated log4j version
@@ -492,7 +497,8 @@ are attached to roads. ([Issue #162](https://github.com/GIScience/openrouteservi
 - Fix bug in RPHAST when location lies on a oneway road.
 - Consider turn restrictions if optimized=false is passed.
 
-[unreleased]: https://github.com/GIScience/openrouteservice/compare/v6.6.3...HEAD
+[unreleased]: https://github.com/GIScience/openrouteservice/compare/v6.6.4...HEAD
+[6.6.4]: https://github.com/GIScience/openrouteservice/compare/v6.6.3...v6.6.4
 [6.6.3]: https://github.com/GIScience/openrouteservice/compare/v6.6.2...v6.6.3
 [6.6.2]: https://github.com/GIScience/openrouteservice/compare/v6.6.1...v6.6.2
 [6.6.1]: https://github.com/GIScience/openrouteservice/compare/v6.6.0...v6.6.1
diff --git a/openrouteservice-api-tests/pom.xml b/openrouteservice-api-tests/pom.xml
index 6591fdb530..8715324d9d 100644
--- a/openrouteservice-api-tests/pom.xml
+++ b/openrouteservice-api-tests/pom.xml
@@ -14,7 +14,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <maven.compiler.target>1.8</maven.compiler.target>
         <slf4j.version>1.7.32</slf4j.version>
-        <log4j.version>2.16.0</log4j.version>
+        <log4j.version>2.17.1</log4j.version>
     </properties>
 
     <build>
diff --git a/openrouteservice/pom.xml b/openrouteservice/pom.xml
index 2d691d21a8..6c607e9a97 100644
--- a/openrouteservice/pom.xml
+++ b/openrouteservice/pom.xml
@@ -51,7 +51,7 @@
         <maven.compiler.target>1.8</maven.compiler.target>
         <geotools.version>19.1</geotools.version>
         <slf4j.version>1.7.32</slf4j.version>
-        <log4j.version>2.16.0</log4j.version>
+        <log4j.version>2.17.1</log4j.version>
         <sonar.projectKey>GIScience_openrouteservice</sonar.projectKey>
         <sonar.organization>giscience</sonar.organization>
         <sonar.host.url>https://sonarcloud.io</sonar.host.url>
@@ -400,19 +400,19 @@
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-core</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-reader-osm</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-api</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <!-- remove the comment to enable debugging