Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Upgrade Log4j to version 2.16 #11723

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cmaglie merged 2 commits into arduino:master from cmaglie:log4j-2.16
Dec 14, 2021
Merged

Upgrade Log4j to version 2.16 #11723

cmaglie merged 2 commits into arduino:master from cmaglie:log4j-2.16
Dec 14, 2021

Conversation

Copy link
Member

@cmaglie cmaglie commented Dec 14, 2021

This release provides extra hardening for CVE-2021-44228

https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

Since we already started the release process for IDE 1.8.17, to avoid confusion we will bump the IDE version to 1.8.18.

@cmaglie cmaglie added the security Security fixes / bugs / improvements label Dec 14, 2021
@cmaglie cmaglie merged commit 6cf3a89 into arduino:master Dec 14, 2021
@cmaglie cmaglie deleted the log4j-2.16 branch December 14, 2021 13:26
Copy link
Contributor

@cmaglie - Have you seen CVE-2021-45105 and log4j 2.17?

https://logging.apache.org/log4j/2.x/security.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security Security fixes / bugs / improvements
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

AltStyle によって変換されたページ (->オリジナル) /