You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by kn...@apache.org on 2021/12/21 16:20:08 UTC
[flink] branch FLINK-25375-112 created (now f1a79f4)
This is an automated email from the ASF dual-hosted git repository.
knaufk pushed a change to branch FLINK-25375-112
in repository https://gitbox.apache.org/repos/asf/flink.git.
at f1a79f4 [FLINK-25375] Update log4j2 dependency to 2.17.0 to address CVE-2021-45105
This branch includes the following new commits:
new f1a79f4 [FLINK-25375] Update log4j2 dependency to 2.17.0 to address CVE-2021-45105
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[flink] 01/01: [FLINK-25375] Update log4j2 dependency to 2.17.0 to address CVE-2021-45105
Posted by kn...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
knaufk pushed a commit to branch FLINK-25375-112
in repository https://gitbox.apache.org/repos/asf/flink.git
commit f1a79f4e4f24d76d7068d482d64866ca28ad9986
Author: Bernard Joseph Jean Bruno <br...@busymind101.com>
AuthorDate: Sun Dec 19 14:27:32 2021 +0400
[FLINK-25375] Update log4j2 dependency to 2.17.0 to address
CVE-2021-45105
---
docs/dev/project-configuration.md | 2 +-
docs/dev/project-configuration.zh.md | 2 +-
pom.xml | 2 +-
tools/releasing/NOTICE-binary_PREAMBLE.txt | 8 ++++----
4 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/docs/dev/project-configuration.md b/docs/dev/project-configuration.md
index 36d4610..28172e0 100644
--- a/docs/dev/project-configuration.md
+++ b/docs/dev/project-configuration.md
@@ -326,7 +326,7 @@ ext {
flinkVersion = '{{ site.version }}'
scalaBinaryVersion = '{{ site.scala_version }}'
slf4jVersion = '1.7.15'
- log4jVersion = '2.16.0'
+ log4jVersion = '2.17.0'
}
diff --git a/docs/dev/project-configuration.zh.md b/docs/dev/project-configuration.zh.md
index 3f48dce..dee703c 100644
--- a/docs/dev/project-configuration.zh.md
+++ b/docs/dev/project-configuration.zh.md
@@ -326,7 +326,7 @@ ext {
flinkVersion = '{{ site.version }}'
scalaBinaryVersion = '{{ site.scala_version }}'
slf4jVersion = '1.7.15'
- log4jVersion = '2.16.0'
+ log4jVersion = '2.17.0'
}
diff --git a/pom.xml b/pom.xml
index cfed76b..b5fcb08 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@ under the License.
<akka.version>2.5.21</akka.version>
<target.java.version>1.8</target.java.version>
<slf4j.version>1.7.15</slf4j.version>
- <log4j.version>2.12.1</log4j.version>
+ <log4j.version>2.17.0</log4j.version>
<!-- Overwrite default values from parent pom.
Intellij is (sometimes?) using those values to choose target language level
and thus is changing back to java 1.6 on each maven re-import -->
diff --git a/tools/releasing/NOTICE-binary_PREAMBLE.txt b/tools/releasing/NOTICE-binary_PREAMBLE.txt
index fba3eb0..4613ecc 100644
--- a/tools/releasing/NOTICE-binary_PREAMBLE.txt
+++ b/tools/releasing/NOTICE-binary_PREAMBLE.txt
@@ -8,10 +8,10 @@ Copyright 2014-2021 The Apache Software Foundation
This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
-- org.apache.logging.log4j:log4j-api:2.12.1
-- org.apache.logging.log4j:log4j-core:2.12.1
-- org.apache.logging.log4j:log4j-slf4j-impl:2.12.1
-- org.apache.logging.log4j:log4j-1.2-api:2.12.1
+- org.apache.logging.log4j:log4j-api:2.17.0
+- org.apache.logging.log4j:log4j-core:2.17.0
+- org.apache.logging.log4j:log4j-slf4j-impl:2.17.0
+- org.apache.logging.log4j:log4j-1.2-api:2.17.0
This project bundles the following dependencies under the BSD license.
See bundled license files for details.