Upgrade log4j to fix CVE-2021-45105 issue

sky-uk / cqlmigrate

Cassandra schema migration library

BSD 3-Clause "New" or "Revised" License

47 stars 29 forks source link

Upgrade log4j to fix CVE-2021-45105 issue #108

Closed rauligsky closed 2 years ago

rauligsky commented 2 years ago

"Apache Log4j2 does not always protect from infinite recursion in lookup evaluation". See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105

davidh87 commented 2 years ago

Closing and re-opening to try and kick travisCI into action

oliverlockwood commented 2 years ago

@davidh87 and @adamdougal FYI, Travis have changed their policies - you have to formally request credits for building OSS apps without paying to do so, and demonstrate your OSS credentials. A bit of hoop jumping is all, I've personally dealt with it for two separate OSS organisations already.

See https://docs.travis-ci.com/user/billing-faq/#what-if-i-am-building-open-source for details.

Hope this helps. It took me a while the first time to figure out why Travis had gone AWOL.

davidh87 commented 2 years ago

Closing and reopening to trigger travisCI after credits were added