You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@logging.apache.org by "Ralph Goers (Jira)" <ji...@apache.org> on 2019/12/23 14:19:00 UTC
[jira] [Resolved] (LOG4J2-2743) Spring Boot Starters(2.0.8) still
refers to log4j2 2.10.0 libraries in Maven Central
[ https://issues.apache.org/jira/browse/LOG4J2-2743?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ralph Goers resolved LOG4J2-2743.
---------------------------------
Resolution: Invalid
The Apache Log4j team has no control over what versions of Log4j the Spring Boot team includes as dependencies. You would need to raise an issue with them. However, you can certainly override the version specified by Spring in your own pom files in the dependencyManagement section.
> Spring Boot Starters(2.0.8) still refers to log4j2 2.10.0 libraries in Maven Central
> ------------------------------------------------------------------------------------
>
> Key: LOG4J2-2743
> URL: https://issues.apache.org/jira/browse/LOG4J2-2743
> Project: Log4j 2
> Issue Type: Dependency upgrade
> Components: Build
> Affects Versions: 2.13.0
> Reporter: Buks van der Lingen
> Priority: Major
>
> [[https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-log4j2/2.0.8.RELEASE]]
> reflects that log4j2 libs are updated to 2.13.0 but repositories still contain 2.10.0 jars.
> [[https://repo.spring.io/release/org/springframework/boot/spring-boot-starter-log4j2/2.0.8.RELEASE/spring-boot-starter-log4j2-2.0.8.RELEASE.pom]]
> [[https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-log4j2/2.0.8.RELEASE/spring-boot-starter-log4j2-2.0.8.RELEASE.pom]]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)