8000 Bump version of log4j to 2.17.0 to fix further vulnerabilities relate… · localstack/localstack-java-utils@a7b95bb · GitHub
[go: up one dir, main page]
Skip to content

Commit a7b95bb

Browse files
whummerwhummer
committed
Bump version of log4j to 2.17.0 to fix further vulnerabilities related to recent CVE
1 parent f9d4c33 commit a7b95bb

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

‎README.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ Simply add the following dependency to your `pom.xml` file:
6060
<dependency>
6161
<groupId>cloud.localstack</groupId>
6262
<artifactId>localstack-utils</artifactId>
63-
<version>0.2.18</version>
63+
<version>0.2.19</version>
6464
</dependency>
6565
```
6666

@@ -108,6 +108,7 @@ make build
108108

109109
## Change Log
110110

111+
* v0.2.19: Bump version of log4j to 2.17.0 to fix further vulnerabilities related to recent CVE
111112
* v0.2.18: Fix for isRunning method after stopping the container; filter synthetic bridge methods during method detection for java Lambda full handler syntax; pass ADDITIONAL_MVN_ARGS to mvn javadoc command; bump version of log4j to 2.15.0 to fix CVE-2021-44228
112113
* v0.2.17: Fix issue with using :: to specify lambda handler which implements the RequestHandler interface, revert removal of EC2HostNameResolver annotation
113114
* v0.2.16: Add support for :: notation for Java Lambda handler specification, fix failing QLDB tests, fix failing tests with Jexter rules/extensions

‎pom.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
<groupId>cloud.localstack</groupId>
55
<artifactId>localstack-utils</artifactId>
66
<packaging>jar</packaging>
7-
<version>0.2.18</version>
7+
<version>0.2.19</version>
88
<name>localstack-utils</name>
99

1010
<description>Java utilities for the LocalStack platform.</description>
@@ -230,13 +230,13 @@
230230
<dependency>
231231
<groupId>org.apache.logging.log4j</groupId>
232232
<artifactId>log4j-slf4j-impl</artifactId>
233-
<version>2.14.1</version>
233+
<version>2.17.0</version>
234234
<scope>provided</scope>
235235
</dependency>
236236
<dependency>
237237
<groupId>org.apache.logging.log4j</groupId>
238238
<artifactId>log4j-jcl</artifactId>
239-
<version>2.14.1</version>
239+
<version>2.17.0</version>
240240
<scope>provided</scope>
241241
</dependency>
242242

0 commit comments

Comments
 (0)
0