I did this based on what was posted earlier in the thread to update 6.2.
-- add to build.gradle dependencies section
implementation "org.apache.logging.log4j:log4j-api:2.16.0"
implementation "org.apache.logging.log4j:log4j-core:2.16.0"
implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
implementation "org.apache.logging.log4j:log4j-web:2.16.0"
implementation "org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"
-- add to the end of build.gradle
bootWar {
entryCompression = ZipEntryCompression.STORED
overlays {
cas {
from
"org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
"
provided = false
excludes =
["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
}
}
}
I would recommend you unpack the new war once it is built and update the
excludes list as needed.
-Jeff
-Jeff
On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye <[email protected]> wrote:
> good evening
>
> I would like to know if we make an update of log4j 2.16 how to know if CAS
> has supported it (use it) and also for the update we only need to add this
> lines
>
>
> dependencies {
> compile "org.apache.logging.log4j:log4j-api:2.15.0"
> compile "org.apache.logging.log4j:log4j-core:2.15.0"
> compile "org.apache.logging.log4j:log4j-jcl:2.15.0"
> compile "org.apache.logging.log4j:log4j-jul:2.15.0"
> compile "org.apache.logging.log4j:log4j-web:2.15.0"
> compile "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"
> }
>
>
> Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay <[email protected]> a
> écrit :
>
>> Robert and Joe,
>>
>> Your examples were really helpful. I was able to combine the steps and
>> patch our systems.
>>
>> Thanks,
>> -Jeff
>>
>> On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri <[email protected]>
>> wrote:
>>
>>> Note v2.16.0 is now out .... a patch for the patch
>>>
>>> On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user wrote:
>>>
>>>> We use cas 6.1.7 overlay template [still in pre-prod] for delegated
>>>> authentication.
>>>> As a temp solution we replaced log4j 2.12.1 with 2.15.0 manually and
>>>> bounced tomcat.
>>>> Is there a way we can exclude 2.12.1 from the build . [I can pull in
>>>> 2.15.0 by adding in build.gradle but conflict with 2.12.1]. We have issues
>>>> when upgrading to 6.3.7.2
>>>>
>>>> Thanks
>>>>
>>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to [email protected].
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org?utm_medium=email&utm_source=footer>
>>> .
>>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> .
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOS6LWQejurUsgHNbm%3DNZ9dBe_rswt_M4Y%2BqGqpsk1OEGQ%40mail.gmail.com.
