Skip to content

v3.5.4

Compare
Choose a tag to compare
@KarstenSchnitter KarstenSchnitter released this 15 Dec 14:02

⚠️ This release upgrades Log4j2 to version 2.16.0 in mitigation of CVE-2021-44228. Furthermore it resolves a regression where invalid JSON messages were generated when using cf-java-logging-support-log4j2@3.5.3

What's Changed

  • #123 Upgrade of 3rd party dependencies new versions
    • log4j 2.16.0
    • slf4j 1.7.32
    • logback 1.7.32
    • jackson-jr 2.13.0
    • jackson-databind 2.13.0 (servlet)
    • java-jwt 3.18.2 (servlet)
    • spring-boot 2.6.1 (sample app)
    • jetty 9.4.44.v20210927 (test only)
  • #126 Fix invalid JSON format generated with cf-java-logging-support-log4j2 as described in #124

Full Changelog: v3.5.3...v3.5.4