Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump log4j to 2.16.0 #13277

Merged
merged 1 commit into from
Dec 14, 2021
Merged

Bump log4j to 2.16.0 #13277

merged 1 commit into from
Dec 14, 2021

Conversation

michaeljmarshall
Copy link
Member

Motivation

Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

Modifications

  • Update log4j version from 2.15.0 to 2.16.0.

Verifying this change

Based on the release notes, this change should be trivial.

Does this pull request potentially affect one of the following parts:

This is not a breaking change.

Documentation

  • no-need-doc

@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Dec 14, 2021
@codelipenghui codelipenghui added this to the 2.10.0 milestone Dec 14, 2021
315157973
315157973 reviewed Dec 14, 2021
View reviewed changes
Copy link
Contributor

@315157973 315157973 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please also update the pom in path pulsar/pom.xml

@315157973
Copy link
Contributor

Could you please also update the pom in path pulsar/pom.xml

Oh, my mistake

@315157973 315157973 merged commit 621ca60 into apache:master Dec 14, 2021
eolivelli pushed a commit that referenced this pull request Dec 14, 2021
@michaeljmarshall @eolivelli
Bump log4j to 2.16.0 (#13277)
ff99f5f 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

(cherry picked from commit 621ca60)
lhotari pushed a commit to datastax/pulsar that referenced this pull request Dec 14, 2021
@michaeljmarshall @lhotari
Bump log4j to 2.16.0 (apache#13277)
e0dd6b3 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

(cherry picked from commit 621ca60)
lhotari added a commit to datastax/pulsar that referenced this pull request Dec 14, 2021
@lhotari
Bump log4j to 2.16.0 (apache#13277)
6e5ab9a 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

(cherry picked from commit 621ca60)
merlimat pushed a commit that referenced this pull request Dec 14, 2021
@michaeljmarshall @merlimat
Bump log4j to 2.16.0 (#13277)
1bef890 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
merlimat pushed a commit that referenced this pull request Dec 14, 2021
@michaeljmarshall @merlimat
Bump log4j to 2.16.0 (#13277)
c00699a 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
@eolivelli eolivelli added cherry-picked/branch-2.9 Archived: 2.9 is end of life release/2.9.1 labels Dec 15, 2021
codelipenghui pushed a commit that referenced this pull request Dec 16, 2021
@michaeljmarshall @codelipenghui
Bump log4j to 2.16.0 (#13277)
0de7dd6 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

(cherry picked from commit 621ca60)
fxbing pushed a commit to fxbing/pulsar that referenced this pull request Dec 19, 2021
@michaeljmarshall
Bump log4j to 2.16.0 (apache#13277)
bd4df6f 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
bharanic-dev pushed a commit to bharanic-dev/pulsar that referenced this pull request Mar 18, 2022
@michaeljmarshall @ciaocloud
Bump log4j to 2.16.0 (apache#13277)
31db1c3 
Apache Log4j 2.16.0 was just released. It is a more complete fix for Log4Shell. See the Apache Log4j mailing list for details: https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lhotari lhotari lhotari approved these changes

@hangc0276 hangc0276 hangc0276 approved these changes

@315157973 315157973 315157973 approved these changes

@codelipenghui codelipenghui codelipenghui approved these changes

@shoothzj shoothzj shoothzj approved these changes

@Demogorgon314 Demogorgon314 Demogorgon314 approved these changes

@eolivelli eolivelli Awaiting requested review from eolivelli

@merlimat merlimat Awaiting requested review from merlimat

Assignees

@michaeljmarshall michaeljmarshall

Labels
area/security cherry-picked/branch-2.9 Archived: 2.9 is end of life doc-not-needed Your PR changes do not impact docs release/2.9.1
Projects
None yet
Milestone
2.10.0
Development

Successfully merging this pull request may close these issues.
8 participants
@michaeljmarshall @315157973 @lhotari @hangc0276 @codelipenghui @shoothzj @Demogorgon314 @eolivelli