rpms/log4j
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack

Browse Source
This commit is contained in:
Paul Wouters 2021-12-18 10:30:49 -05:00
parent e3705a4e8c
commit 5c70a72ed7
3 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -22,3 +22,4 @@
/apache-log4j-2.14.1-src.tar.gz
/apache-log4j-2.15.0-src.tar.gz
/apache-log4j-2.16.0-src.tar.gz
/apache-log4j-2.17.0-src.tar.gz

5
log4j.spec
View File

@ -1,7 +1,7 @@
%bcond_without jp_minimal
Name: log4j
Version: 2.16.0
Version: 2.17.0
Release: 1%{?dist}
Summary: Java logging package
BuildArch: noarch
@ -284,6 +284,9 @@ rm -r log4j-1.2-api/src/main/java/org/apache/log4j/or/jms
%changelog
* Sat Dec 18 2021 Paul Wouters <paul.wouters@aiven.io> - 2.17.0-1
- Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
* Mon Dec 13 2021 Paul Wouters <paul.wouters@aiven.io> - 2.16.0-1
- Update log4j to 2.16.0 - Disables JNDI by default

2
sources
View File

@ -1 +1 @@
SHA512 (apache-log4j-2.16.0-src.tar.gz) = c520a5af1ac4161f0b0c9cb466a0c6bf349cce567b8c1c1ee01fc0b0258852f0ef4f7a7967f367168f4395e7fdd981fd35b7cb6d5f236b6421699bd2b1ccf919
SHA512 (apache-log4j-2.17.0-src.tar.gz) = 23433baa39a8cc76164ae96307e85b9e4ea671028015df6171bfaf025a1e1aaacf76a94a1beef67aada56952f013a8eae94024869a8530f42a3747ba70cc3a90