You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by ch...@apache.org on 2021/12/17 11:51:17 UTC
[flink-web] branch asf-site updated (3d4860f -> 36f9294)
This is an automated email from the ASF dual-hosted git repository.
chesnay pushed a change to branch asf-site
in repository https://gitbox.apache.org/repos/asf/flink-web.git.
from 3d4860f Revert "Rebuilt website"
new 6f44cc2 Clarify release contents
new 36f9294 Rebuilt website
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
_posts/2021-12-16-log4j-patch-releases.md | 4 ++--
content/blog/feed.xml | 4 ++--
content/news/2021/12/16/log4j-patch-releases.html | 4 ++--
3 files changed, 6 insertions(+), 6 deletions(-)
[flink-web] 02/02: Rebuilt website
Posted by ch...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
chesnay pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/flink-web.git
commit 36f9294358caa0f02448c1b24abce10f7866f518
Author: Chesnay Schepler <ch...@apache.org>
AuthorDate: Fri Dec 17 12:51:08 2021 +0100
Rebuilt website
---
content/blog/feed.xml | 4 ++--
content/news/2021/12/16/log4j-patch-releases.html | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/content/blog/feed.xml b/content/blog/feed.xml
index cbc32a6..770af84 100644
--- a/content/blog/feed.xml
+++ b/content/blog/feed.xml
@@ -10,7 +10,7 @@
<title>Apache Flink Log4j emergency releases</title>
<description><p>The Apache Flink community has released emergency bugfix versions of Apache Flink for the 1.11, 1.12, 1.13 and 1.14 series.</p>
-<p>These releases include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p>
+<p>These releases only include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p>
<p>We highly recommend all users to upgrade to the respective patch release.</p>
@@ -39,7 +39,7 @@
<li>1.11.6</li>
</ul>
- <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p>
+ <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p>
</div>
</description>
diff --git a/content/news/2021/12/16/log4j-patch-releases.html b/content/news/2021/12/16/log4j-patch-releases.html
index f564e16..b5d07ac 100644
--- a/content/news/2021/12/16/log4j-patch-releases.html
+++ b/content/news/2021/12/16/log4j-patch-releases.html
@@ -204,7 +204,7 @@
<p>The Apache Flink community has released emergency bugfix versions of Apache Flink for the 1.11, 1.12, 1.13 and 1.14 series.</p>
-<p>These releases include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p>
+<p>These releases only include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p>
<p>We highly recommend all users to upgrade to the respective patch release.</p>
@@ -233,7 +233,7 @@
<li>1.11.6</li>
</ul>
- <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p>
+ <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p>
</div>
[flink-web] 01/02: Clarify release contents
Posted by ch...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
chesnay pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/flink-web.git
commit 6f44cc26d51d44e635939658c6245e47c2a6a60f
Author: Chesnay Schepler <ch...@apache.org>
AuthorDate: Fri Dec 17 12:48:01 2021 +0100
Clarify release contents
---
_posts/2021-12-16-log4j-patch-releases.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/_posts/2021-12-16-log4j-patch-releases.md b/_posts/2021-12-16-log4j-patch-releases.md
index f895b06..d72230b 100644
--- a/_posts/2021-12-16-log4j-patch-releases.md
+++ b/_posts/2021-12-16-log4j-patch-releases.md
@@ -11,7 +11,7 @@ authors:
The Apache Flink community has released emergency bugfix versions of Apache Flink for the 1.11, 1.12, 1.13 and 1.14 series.
-These releases include a version upgrade for Log4j to address [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) and [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046).
+These releases only include a version upgrade for Log4j to address [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) and [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046).
We highly recommend all users to upgrade to the respective patch release.
@@ -36,6 +36,6 @@ The newly released versions are:
* 1.12.7
* 1.11.6
-To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases were _skipped_ because [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046) was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.
+To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were _skipped_ because [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046) was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.
</div>