NEWS for 4.11.1

folio-org · Dec 20, 2021 · 50e4f00 · 50e4f00
1 parent c0a21e9
commit 50e4f00
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/NEWS.md b/NEWS.md
@@ -1,3 +1,10 @@
+## 4.11.1 2021-12-20
+
+Fixes:
+ * [OKAPI-1056](https://issues.folio.org/browse/OKAPI-1056) Log4j 2.17.0 fixing self-referential lookups in Thread Context Map (CVE-2021-45105)
+ * [OKAPI-1057](https://issues.folio.org/browse/OKAPI-1057) Vert.x 4.2.2, Netty 4.1.72.Final fixing header request smuggling (CVE-2021-43797)
+ * [OKAPI-1058](https://issues.folio.org/browse/OKAPI-1058) Reject MDC lookups mitigating log4j vuln (CVE-2021-45105)
+
 ## 4.11.0 2021-12-17
 
 Features: