apache/kyuubi
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

[KYUUBI #3145] Bump log4j from 2.17.2 to 2.18.0

Browse Source 
### _Why are the changes needed?_

Bumping log4j from 2.17.2 to 2.18.0 will reduce the risk of CVEs.

### _How was this patch tested?_
- [ ] Add some test cases that check the changes thoroughly including negative and positive cases if possible

- [ ] Add screenshots for manual tests if appropriate

- [x] [Run test](https://kyuubi.apache.org/docs/latest/develop_tools/testing.html#running-tests) locally before make a pull request (Ran ```./build/mvn clean test``` - see screenshots below for more info)

Closes #3187 from ParisaTork/bump-log4j.

Closes #3145

c9f9e4a8 [ParisaTork] Update dependency list
c0d88f39 [ParisaTork] Bump log4j from 2.17.2 to 2.18.0

Authored-by: ParisaTork <47482049+ParisaTork@users.noreply.github.com>
Signed-off-by: Cheng Pan <chengpan@apache.org>
This commit is contained in:
ParisaTork 2022-08-07 22:02:49 +08:00 committed by Cheng Pan
parent b87ee9831c
commit 3618002b96
No known key found for this signature in database
GPG Key ID: 8001952629BCC75D
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
dev/dependencyList
View File

@ -122,10 +122,10 @@ kubernetes-model-scheduling/5.12.1//kubernetes-model-scheduling-5.12.1.jar
kubernetes-model-storageclass/5.12.1//kubernetes-model-storageclass-5.12.1.jar
libfb303/0.9.3//libfb303-0.9.3.jar
libthrift/0.9.3//libthrift-0.9.3.jar
log4j-1.2-api/2.17.2//log4j-1.2-api-2.17.2.jar
log4j-api/2.17.2//log4j-api-2.17.2.jar
log4j-core/2.17.2//log4j-core-2.17.2.jar
log4j-slf4j-impl/2.17.2//log4j-slf4j-impl-2.17.2.jar
log4j-1.2-api/2.18.0//log4j-1.2-api-2.18.0.jar
log4j-api/2.18.0//log4j-api-2.18.0.jar
log4j-core/2.18.0//log4j-core-2.18.0.jar
log4j-slf4j-impl/2.18.0//log4j-slf4j-impl-2.18.0.jar
logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
metrics-core/4.2.8//metrics-core-4.2.8.jar
metrics-jmx/4.2.8//metrics-jmx-4.2.8.jar

2
pom.xml
View File

@ -151,7 +151,7 @@
<kubernetes-client.version>5.12.1</kubernetes-client.version>
<kudu.version>1.15.0</kudu.version>
<ldapsdk.version>5.1.4</ldapsdk.version>
<log4j.version>2.17.2</log4j.version>
<log4j.version>2.18.0</log4j.version>
<mysql.jdbc.version>8.0.27</mysql.jdbc.version>
<netty.version>4.1.73.Final</netty.version>
<parquet.version>1.10.1</parquet.version>