Merge pull request #3273 from RPTools/bug-fixes-1.11

Changes for 1.11.4
RPTools · Dec 12, 2021 · 29b71be · 29b71be
2 parents 44fcb4a + 7533335
commit 29b71be
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 2 deletions.
diff --git a/CHANGE_LOG.md b/CHANGE_LOG.md
@@ -1,3 +1,16 @@
+# MapTool 1.11.4
+**Security Fix Release**
+
+Updated the Log4J libraries for a [security vulnerability](https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/apache-releases-log4j-version-2150-address-critical-rce).
+
+- [#3266][i3266] Update to log4j-1.2-api v2.15.0
+- [#3265][i3265] Update to log4j-core v2.15.0
+- [#3264][i3264] Update to log4j-api v2.15.0
+
+[i3266]: https://github.com/RPTools/maptool/issues/3266
+[i3265]: https://github.com/RPTools/maptool/issues/3265
+[i3264]: https://github.com/RPTools/maptool/issues/3264
+
 # MapTool 1.11.3
 
 **Bug fix release.**

diff --git a/build.gradle b/build.gradle
@@ -296,10 +296,9 @@ repositories {
 
 // In this section you declare the dependencies for your production and test code
 dependencies {
-    implementation group: 'org.apache.logging.log4j', name: 'log4j-1.2-api', version: '2.15.0'	// Bridges v1 to v2 for other code in other libs
     implementation group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.15.0'
     implementation group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.15.0'
-
+    implementation group: 'org.apache.logging.log4j', name: 'log4j-1.2-api', version: '2.15.0'	// Bridges v1 to v2 for other code in other libs
     implementation group: 'org.slf4j', name: 'slf4j-simple', version: '1.7.31'
     implementation group: 'commons-logging', name: 'commons-logging', version: '1.2'