You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Alexey Serbin (Code Review)" <ge...@cloudera.org> on 2021/12/14 01:25:19 UTC

[kudu-CR] [java] bump log4j up to 2.16.0 version

Alexey Serbin has uploaded this change for review. ( http://gerrit.cloudera.org:8080/18095


Change subject: [java] bump log4j up to 2.16.0 version
......................................................................

[java] bump log4j up to 2.16.0 version

OK, it seems 2.16.0 is the new shiny version to have once the recent
security vulnerability CVE-2021-44228 has been fixed in 2.15.0.

Release notes for the new version of the package is available at [1].

This is a follow-up to a6079a063c8f38166d91956ad46a4ce695a08019.

[1] https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0

Change-Id: Ied261b7fdb412839b40a0d68a131963c61b09356
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)



  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/95/18095/1
-- 
To view, visit http://gerrit.cloudera.org:8080/18095
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ied261b7fdb412839b40a0d68a131963c61b09356
Gerrit-Change-Number: 18095
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>

[kudu-CR] [java] bump log4j up to 2.16.0 version

Posted by "Andrew Wong (Code Review)" <ge...@cloudera.org>.
Andrew Wong has posted comments on this change. ( http://gerrit.cloudera.org:8080/18095 )

Change subject: [java] bump log4j up to 2.16.0 version
......................................................................


Patch Set 1: Code-Review+2


-- 
To view, visit http://gerrit.cloudera.org:8080/18095
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ied261b7fdb412839b40a0d68a131963c61b09356
Gerrit-Change-Number: 18095
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Tue, 14 Dec 2021 01:26:17 +0000
Gerrit-HasComments: No

[kudu-CR] [java] bump log4j up to 2.16.0 version

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/18095 )

Change subject: [java] bump log4j up to 2.16.0 version
......................................................................

[java] bump log4j up to 2.16.0 version

OK, it seems 2.16.0 is the new shiny version to have once the recent
security vulnerability CVE-2021-44228 has been fixed in 2.15.0.

Release notes for the new version of the package is available at [1].

This is a follow-up to a6079a063c8f38166d91956ad46a4ce695a08019.

[1] https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0

Change-Id: Ied261b7fdb412839b40a0d68a131963c61b09356
Reviewed-on: http://gerrit.cloudera.org:8080/18095
Reviewed-by: Andrew Wong <aw...@cloudera.com>
Tested-by: Kudu Jenkins
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Andrew Wong: Looks good to me, approved
  Kudu Jenkins: Verified

-- 
To view, visit http://gerrit.cloudera.org:8080/18095
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: Ied261b7fdb412839b40a0d68a131963c61b09356
Gerrit-Change-Number: 18095
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com>
Gerrit-Reviewer: Kudu Jenkins (120)