This is an automated email from the ASF dual-hosted git repository. chesnay pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/flink-web.git
commit 36f9294358caa0f02448c1b24abce10f7866f518 Author: Chesnay Schepler <[email protected]> AuthorDate: Fri Dec 17 12:51:08 2021 +0100 Rebuilt website --- content/blog/feed.xml | 4 ++-- content/news/2021/12/16/log4j-patch-releases.html | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/content/blog/feed.xml b/content/blog/feed.xml index cbc32a6..770af84 100644 --- a/content/blog/feed.xml +++ b/content/blog/feed.xml @@ -10,7 +10,7 @@ <title>Apache Flink Log4j emergency releases</title> <description><p>The Apache Flink community has released emergency bugfix versions of Apache Flink for the 1.11, 1.12, 1.13 and 1.14 series.</p> -<p>These releases include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p> +<p>These releases only include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a>.</p> <p>We highly recommend all users to upgrade to the respective patch release.</p> @@ -39,7 +39,7 @@ <li>1.11.6</li> </ul> - <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p> + <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p> </div> </description> diff --git a/content/news/2021/12/16/log4j-patch-releases.html b/content/news/2021/12/16/log4j-patch-releases.html index f564e16..b5d07ac 100644 --- a/content/news/2021/12/16/log4j-patch-releases.html +++ b/content/news/2021/12/16/log4j-patch-releases.html @@ -204,7 +204,7 @@ <p>The Apache Flink community has released emergency bugfix versions of Apache Flink for the 1.11, 1.12, 1.13 and 1.14 series.</p> -<p>These releases include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228";>CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046";>CVE-2021-45046</a>.</p> +<p>These releases only include a version upgrade for Log4j to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228";>CVE-2021-44228</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046";>CVE-2021-45046</a>.</p> <p>We highly recommend all users to upgrade to the respective patch release.</p> @@ -233,7 +233,7 @@ <li>1.11.6</li> </ul> - <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046";>CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p> + <p>To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were <em>skipped</em> because <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046";>CVE-2021-45046</a> was discovered during the release publication. Some artifacts were published to Maven Central, but no source/binary releases nor Docker images are available for those versions.</p> </div>
