Looks like we should be using log4j v 2.16.0 as 2.15.0 will not be good enough.
https://logging.apache.org/log4j/2.x/security.html On Monday, December 13, 2021 at 10:07:32 PM UTC-6 Misagh Moayyed wrote: > Yes you can. > > -- Misagh > > On Tue, Dec 14, 2021, 12:35 AM Pablo Vidaurri <[email protected]> wrote: > >> We currently have 6.3.7 deployed. I see cas project v6.3.7.2 has the fix >> for the log4j vulnerability (using log4j-core v2.15.0). So what is the >> proper way to upgrade CAS template? Looking at the cas project i see >> gradle.properties >> <https://github.com/apereo/cas/blob/v6.3.7.2/gradle.properties> has >> log4jVersion set to 2.15.0 . But looking at the cas-overlay project, >> gradle.properties >> <https://github.com/apereo/cas-overlay-template/blob/6.3/gradle.properties> >> still has cas.version=6.3.7. >> >> Can I just update the cas-template project to use cas.version to 6.3.7.2? >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/2bacb815-d2b4-4cdc-bc84-f80b5a420f77n%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2bacb815-d2b4-4cdc-bc84-f80b5a420f77n%40apereo.org?utm_medium=email&utm_source=footer> >> . >> > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c43bfa3a-b749-4478-ae9b-f30e60afa7a0n%40apereo.org.
