From: Julien Lepiller <julien@lepiller.eu>
To: 52421@debbugs.gnu.org
Subject: [bug#52421] [PATCH 5/5] gnu: java-log4j-api: Update to 2.15.0.
Date: Sat, 11 Dec 2021 03:23:07 +0100 [thread overview]
Message-ID: <ae43926920eeab53391166b440cee9c104e140ef.1639188753.git.julien@lepiller.eu> (raw)
In-Reply-To: <20211211031159.29aa79db@tachikoma.lepiller.eu>
Includes fixes for CVE-2017-5645, CVE-2020-9488 and CVE-2021-44228.
* gnu/packages/java.scm (java-log4j-api): Update to 2.15.0.
(java-log4j-core, java-log4j-1.2-api)[inputs]: Adjust accordingly.
---
gnu/packages/java.scm | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 785e9f13e2..d295077113 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -7840,14 +7840,14 @@ (define-public java-javax-mail
(define-public java-log4j-api
(package
(name "java-log4j-api")
- (version "2.4.1")
+ (version "2.15.0")
(source (origin
(method url-fetch)
(uri (string-append "mirror://apache/logging/log4j/" version
"/apache-log4j-" version "-src.tar.gz"))
(sha256
(base32
- "0j5p9gik0jysh37nlrckqbky12isy95cpwg2gv5fas1rcdqbraxd"))))
+ "0h4ndw096h9cql0kyi1zd0ymp8hqxc1jdgdxkn0kxf8vd9b4dx14"))))
(build-system ant-build-system)
(arguments
`(#:tests? #f ; tests require unpackaged software
@@ -7869,6 +7869,7 @@ (define-public java-log4j-api
`(("java-osgi-core" ,java-osgi-core)
("java-hamcrest-core" ,java-hamcrest-core)
("java-junit" ,java-junit)))
+ (properties '((cpe-name . "log4j")))
(home-page "https://logging.apache.org/log4j/2.x/")
(synopsis "API module of the Log4j logging framework for Java")
(description
@@ -7886,7 +7887,11 @@ (define-public java-log4j-core
("java-log4j-api" ,java-log4j-api)
("java-mail" ,java-mail)
("java-jboss-jms-api-spec" ,java-jboss-jms-api-spec)
+ ("java-conversant-disruptor" ,java-conversant-disruptor)
("java-lmax-disruptor" ,java-lmax-disruptor)
+ ("java-jctools-core" ,java-jctools-core-1)
+ ("java-stax2-api" ,java-stax2-api)
+ ("java-jansi" ,java-jansi)
("java-kafka" ,java-kafka-clients)
("java-datanucleus-javax-persistence" ,java-datanucleus-javax-persistence)
("java-fasterxml-jackson-annotations" ,java-fasterxml-jackson-annotations)
@@ -7934,6 +7939,7 @@ (define-public java-log4j-1.2-api
(inputs
`(("log4j-api" ,java-log4j-api)
("log4j-core" ,java-log4j-core)
+ ("java-jboss-jms-api-spec" ,java-jboss-jms-api-spec)
("osgi-core" ,java-osgi-core)
("eclipse-osgi" ,java-eclipse-osgi)
("java-lmax-disruptor" ,java-lmax-disruptor)))))
--
2.34.0
next prev parent reply other threads:[~2021-12-11 2:24 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-12-11 2:11 [bug#52421] [PATCH][SECURITY] gnu: java-log4j-api: Update to 2.15.0 Julien Lepiller
2021-12-11 2:23 ` [bug#52421] [PATCH 1/5] gnu: java-jansi: Update to 2.4.0 Julien Lepiller
2021-12-11 2:23 ` [bug#52421] [PATCH 2/5] gnu: Add java-jctools-core-1 Julien Lepiller
2021-12-11 21:09 ` [bug#52421] [PATCH][SECURITY] gnu: java-log4j-api: Update to 2.15.0 Ludovic Courtès
2021-12-12 18:25 ` bug#52421: " Julien Lepiller
2021-12-11 2:23 ` [bug#52421] [PATCH 3/5] gnu: Add java-conversant-disruptor Julien Lepiller
2021-12-11 2:23 ` [bug#52421] [PATCH 4/5] gnu. java-lmax-disruptor: Update to 3.4.4 Julien Lepiller
2021-12-11 2:23 ` Julien Lepiller [this message]
2021-12-11 21:08 ` [bug#52421] [PATCH][SECURITY] gnu: java-log4j-api: Update to 2.15.0 Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ae43926920eeab53391166b440cee9c104e140ef.1639188753.git.julien@lepiller.eu \
--to=julien@lepiller.eu \
--cc=52421@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.