You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Ignite TC Bot (Jira)" <ji...@apache.org> on 2026/04/19 12:33:00 UTC
[jira] [Commented] (IGNITE-28564) Update log4net to 3.3.0+
[ https://issues.apache.org/jira/browse/IGNITE-28564?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18074662#comment-18074662 ]
Ignite TC Bot commented on IGNITE-28564:
----------------------------------------
{panel:title=Branch: [pull/13043/head] Base: [master] : No blockers found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel}
{panel:title=Branch: [pull/13043/head] Base: [master] : No new tests found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1}{panel}
[TeamCity *--> Run :: All* Results|https://ci2.ignite.apache.org/viewLog.html?buildId=9014083&buildTypeId=IgniteTests24Java8_RunAll]
> Update log4net to 3.3.0+
> ------------------------
>
> Key: IGNITE-28564
> URL: https://issues.apache.org/jira/browse/IGNITE-28564
> Project: Ignite
> Issue Type: Improvement
> Reporter: Aleksandr Chesnokov
> Assignee: Aleksandr Chesnokov
> Priority: Major
> Labels: ise
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The *Check .NET code* CI job fails because of a known vulnerability in *log4net 2.0.10:* [https://github.com/advisories/GHSA-4f7c-pmjv-c25w] . This warning is treated as an error.
> See [https://github.com/apache/ignite/actions/runs/24475051962/job/71621895789]
> {noformat}
> /home/runner/work/ignite/ignite/modules/platforms/dotnet/Apache.Ignite.Core.Tests/Apache.Ignite.Core.Tests.DotNetCore.csproj : error NU1902: Warning As Error: Package 'log4net' 2.0.10 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4f7c-pmjv-c25w [/home/runner/work/ignite/ignite/modules/platforms/dotnet/Apache.Ignite.DotNetCore.sln]
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)