You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@jmeter.apache.org by bu...@apache.org on 2022/02/03 13:15:18 UTC

[Bug 65748] jmeter ships with a vulnerable version of log4j2

https://bz.apache.org/bugzilla/show_bug.cgi?id=65748

--- Comment #11 from Ren <re...@brandenburger.lu> ---
Hi,
are there any plans to make a release using the 2.17.1 version of log4j? My
customer has locked the available versions in our maven repository to 2.17.1
and higher, which breaks my maven build using the maven-jmeter plugin to run
performance/regression tests.
This plugin relies on the declared dependencies of jmeter artifacts to set up a
running jmeter instance and so tries to downöoad the 2.17.0 version of log4j.

Regards
René Brandenburger

-- 
You are receiving this mail because:
You are the assignee for the bug.