Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Java] Bump log4j 2.16.0 -> 2.17.0 #21176

Merged
merged 1 commit into from
Dec 20, 2021
Merged

[Java] Bump log4j 2.16.0 -> 2.17.0 #21176

merged 1 commit into from
Dec 20, 2021

Conversation

architkulkarni
Copy link
Contributor

Why are these changes needed?

Resolves CVE-2021-45105.

Related issue number

Checks

  • I've run scripts/format.sh to lint the changes in this PR.
  • I've included any doc changes needed for https://docs.ray.io/en/master/.
  • I've made sure the tests are passing. Note that there might be a few flaky tests, see the recent failures at https://flakey-tests.ray.io/
  • Testing Strategy
    • Unit tests
    • Release tests
    • This PR is not tested :(

ijrsvt
ijrsvt approved these changes Dec 19, 2021
View reviewed changes
Copy link
Contributor

@ijrsvt ijrsvt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

jovany-wang
jovany-wang approved these changes Dec 20, 2021
View reviewed changes
Copy link
Contributor

@jovany-wang jovany-wang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jovany-wang jovany-wang merged commit 774163f into ray-project:master Dec 20, 2021
architkulkarni added a commit that referenced this pull request Dec 21, 2021
@architkulkarni
[Java] Bump log4j 2.16.0 -> 2.17.0 (#21176)
ef593fe 
Resolves [CVE-2021-45105](GHSA-p6xc-xr62-6r2g).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ijrsvt ijrsvt ijrsvt approved these changes

@jovany-wang jovany-wang jovany-wang approved these changes

@ericl ericl ericl approved these changes

@fishbone fishbone Awaiting requested review from fishbone

@kfstorm kfstorm Awaiting requested review from kfstorm kfstorm is a code owner

@raulchen raulchen Awaiting requested review from raulchen raulchen is a code owner

Assignees

@ijrsvt ijrsvt

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@architkulkarni @ericl @jovany-wang @ijrsvt