kazusa
/
skywalking
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove log4j version properties in webapp (#8285) 

* Fix license.

* Remove log4j version properties.

* Fix change log.
This commit is contained in:
吴晟 Wu Sheng 2021-12-12 11:45:06 +08:00 committed by GitHub
parent d3ea14d960
commit d8fd3ee563
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES.md
View File

@ -7,8 +7,8 @@ Release Notes.
#### Project #### Project
* Upgrade log4j2 to 2.15.0 for easing the CVE concern. Officially, unless users open `level=DEBUG` for gRPC/HTTP * Upgrade log4j2 to 2.15.0 for CVE-2021-44228. This CVE only effects on JDK if JDNI is opened in default. Notice, using
handler(s), no security error. JVM option `-Dlog4j2.formatMsgNoLookups=true` also avoids CVE if your JRE opened JNDI in default.
#### OAP Server #### OAP Server
@ -18,6 +18,7 @@ Release Notes.
#### UI #### UI
#### Documentation #### Documentation
All issues and pull requests are [here](https://github.com/apache/skywalking/milestone/112?closed=1) All issues and pull requests are [here](https://github.com/apache/skywalking/milestone/112?closed=1)

1
apm-webapp/pom.xml
View File

@ -32,7 +32,6 @@
<java.version>1.8</java.version> <java.version>1.8</java.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<spring.boot.version>2.4.8</spring.boot.version> <spring.boot.version>2.4.8</spring.boot.version>
<log4j.version>2.6.2</log4j.version>
<gson.version>2.8.2</gson.version> <gson.version>2.8.2</gson.version>
<apache-httpclient.version>4.5.3</apache-httpclient.version> <apache-httpclient.version>4.5.3</apache-httpclient.version>
<spring-cloud-dependencies.version>2020.0.3</spring-cloud-dependencies.version> <spring-cloud-dependencies.version>2020.0.3</spring-cloud-dependencies.version>

2
dist-material/release-docs/LICENSE
View File

@ -249,7 +249,7 @@ The text of each license is the standard Apache 2.0 license.
Apache: commons-lang 3.6: https://github.com/apache/commons-lang, Apache 2.0 Apache: commons-lang 3.6: https://github.com/apache/commons-lang, Apache 2.0
Apache: commons-text 1.8: https://github.com/apache/commons-text, Apache 2.0 Apache: commons-text 1.8: https://github.com/apache/commons-text, Apache 2.0
Apache: commons-beanutils 1.9.4: https://github.com/apache/commons-beanutils, Apache 2.0 Apache: commons-beanutils 1.9.4: https://github.com/apache/commons-beanutils, Apache 2.0
Apache: log4j2 2.14.1: https://github.com/apache/logging-log4j2, Apache 2.0 Apache: log4j2 2.15.0: https://github.com/apache/logging-log4j2, Apache 2.0
Apache: zookeeper 3.5.7: https://github.com/apache/zookeeper, Apache 2.0 Apache: zookeeper 3.5.7: https://github.com/apache/zookeeper, Apache 2.0
Apache: commons-collections 3.2.2: https://github.com/apache/commons-collections, Apache 2.0 Apache: commons-collections 3.2.2: https://github.com/apache/commons-collections, Apache 2.0
Apache: commons-configuration 1.8: https://github.com/apache/commons-configuration, Apache 2.0 Apache: commons-configuration 1.8: https://github.com/apache/commons-configuration, Apache 2.0