You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@commons.apache.org by "Swyrik Thupili (Jira)" <ji...@apache.org> on 2022/01/05 11:44:00 UTC

[jira] [Created] (LOGGING-180) Upgrade commons logging log4j dependency versions to 2.17.0 and above

Swyrik Thupili created LOGGING-180:
--------------------------------------

             Summary: Upgrade commons logging log4j dependency versions to 2.17.0 and above
                 Key: LOGGING-180
                 URL: https://issues.apache.org/jira/browse/LOGGING-180
             Project: Commons Logging
          Issue Type: Bug
    Affects Versions: 1.2, 1.1.1
            Reporter: Swyrik Thupili


Please update the log4j 2 version to the log4j 2.17.0 and above. As the current versions are susceptible to [CVE-2021-44832|https://github.com/advisories/GHSA-8489-44mv-ggj8] Security Vulnerability.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)