You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by zh...@apache.org on 2021/12/11 12:54:14 UTC

[hbase-operator-tools] branch master updated: HBASE-26557 log4j2 has a critical RCE vulnerability (#95)

This is an automated email from the ASF dual-hosted git repository.

zhangduo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hbase-operator-tools.git


The following commit(s) were added to refs/heads/master by this push:
     new 5321d0a  HBASE-26557 log4j2 has a critical RCE vulnerability (#95)
5321d0a is described below

commit 5321d0a5df4aaa3abadd7c3de0d741c7bb5d37e2
Author: Yutong Xiao <yu...@gmail.com>
AuthorDate: Sat Dec 11 20:54:06 2021 +0800

    HBASE-26557 log4j2 has a critical RCE vulnerability (#95)
    
    Signed-off-by: Pankaj Kumar <pa...@apache.org>
    Signed-off-by: Duo Zhang <zh...@apache.org>
---
 hbase-hbck2/pom.xml | 2 +-
 hbase-tools/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/hbase-hbck2/pom.xml b/hbase-hbck2/pom.xml
index 82b0cd0..e3fae81 100644
--- a/hbase-hbck2/pom.xml
+++ b/hbase-hbck2/pom.xml
@@ -32,7 +32,7 @@
   <description>HBCK for HBase 2+</description>
   <properties>
     <hbase-thirdparty.version>2.2.1</hbase-thirdparty.version>
-    <log4j2.version>2.11.1</log4j2.version>
+    <log4j2.version>2.15.0</log4j2.version>
   </properties>
 
   <build>
diff --git a/hbase-tools/pom.xml b/hbase-tools/pom.xml
index 0b41e02..8f03864 100644
--- a/hbase-tools/pom.xml
+++ b/hbase-tools/pom.xml
@@ -35,7 +35,7 @@
     <description>Utility Maintenance tools for HBase 2+</description>
     <properties>
         <hbase-thirdparty.version>2.2.1</hbase-thirdparty.version>
-        <log4j2.version>2.11.1</log4j2.version>
+        <log4j2.version>2.15.0</log4j2.version>
     </properties>
 
     <dependencies>