Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump: log4j to 2.17.0 #1852

Merged
merged 2 commits into from
Dec 19, 2021
Merged

Bump: log4j to 2.17.0 #1852

merged 2 commits into from
Dec 19, 2021

Conversation

princeyesuraj
Copy link
Contributor

馃摐 Description

Bump log4j-api, log4j-core from 2.16.0 to 2.17.0

馃挕 Motivation and Context

CVE-2021-45105
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

馃挌 How did you test it?

馃摑 Checklist

  • I reviewed the submitted code
  • I added tests to verify the changes
  • I updated the docs if needed
  • No breaking changes

馃敭 Next steps

@codecov-commenter
Copy link

codecov-commenter commented Dec 19, 2021

Codecov Report

Merging #1852 (2873cb7) into main (099ce87) will decrease coverage by 0.02%.
The diff coverage is n/a.

Impacted file tree graph

@@             Coverage Diff              @@
##               main    #1852      +/-   ##
============================================
- Coverage     75.54%   75.51%   -0.03%     
  Complexity     2239     2239              
============================================
  Files           225      225              
  Lines          8001     8001              
  Branches        846      846              
============================================
- Hits           6044     6042       -2     
- Misses         1548     1549       +1     
- Partials        409      410       +1     
Impacted Files Coverage 螖
...n/java/io/sentry/transport/ReusableCountLatch.java 88.23% <0.00%> (-5.89%) 猬囷笍

Continue to review full report at Codecov.

Legend - Click here to learn more
螖 = absolute <relative> (impact), 酶 = not affected, ? = missing data
Powered by Codecov. Last update 099ce87...2873cb7. Read the comment docs.

@marandaneto marandaneto merged commit b2aa41e into getsentry:main Dec 19, 2021
maciejwalkowiak pushed a commit that referenced this pull request Jan 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants