Re: Minutes [corrected]: JDO TCK Conference Call Thursday Dec 16 11 AM PST 20 CET

2021-12-19 Thread Craig Russell
Hi Andy, > On Dec 19, 2021, at 6:01 AM, Andy Jefferson wrote: > >> 1. Log4j issue CVE-2021-44228 JDO-800 "Update Log4j Version" >> https://issues.apache.org/jira/browse/JDO-800 >> TCK pom has been updated to log4j 2.16.0. >> What are the DataNucleus versions that we should use that have been

Fwd: [jira] [Comment Edited] (INFRA-22540) Change "Apache Rules" in Nexus to check for sha256/512 instead of sha1/md5

2021-12-19 Thread Tilmann Zäschke
Hi, the INFRA ticket just got updated. Could someone have a look whether I am describing the process/issue correctly? https://issues.apache.org/jira/browse/INFRA-22540?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17461830#comment-17461830 Thanks, Til

Re: Minutes [corrected]: JDO TCK Conference Call Thursday Dec 16 11 AM PST 20 CET

2021-12-19 Thread Andy Jefferson
> 1. Log4j issue CVE-2021-44228 JDO-800 "Update Log4j Version" > https://issues.apache.org/jira/browse/JDO-800 > TCK pom has been updated to log4j 2.16.0. > What are the DataNucleus versions that we should use that have been or will > be updated with the latest log4j releases? The exact same