Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(Plugins): Upgrade log4j to version 2.15.0 #10339

Conversation

atlasgurus
Copy link
Contributor

Closes: #10337

@codecov
Copy link

codecov bot commented Dec 13, 2021

Codecov Report

Merging #10339 (5e46166) into master (654c507) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master   #10339   +/-   ##
=======================================
  Coverage   85.36%   85.36%           
=======================================
  Files         340      340           
  Lines       13990    13990           
=======================================
  Hits        11943    11943           
  Misses       2047     2047           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 654c507...5e46166. Read the comment docs.

@atlasgurus
Copy link
Contributor Author

Hi @medikoo, when do you think you will be able to approve and merge? This is an emergency security fix for a zero day attack that has been a major concern for all security organizations in the last few days.

Thank you,

Vassili

Copy link
Contributor

@medikoo medikoo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @atlasgurus !

@medikoo medikoo merged commit c1df4f8 into serverless:master Dec 13, 2021
@ruimelodev
Copy link

Is there a release on the way for this fix?

@medikoo
Copy link
Contributor

medikoo commented Dec 13, 2021

This is a template change, and such update doesn't affect any existing projects that use Framework.

It'll be published with next release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Critical security issue in log4j version 2.14 and below: CVE-2021-44228
3 participants