This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/master by this push:
new d220c34 Rephrases log4j versioning
d220c34 is described below
commit d220c343c7c636f9faa5eaf8f9e68cbfa5c3a9ea
Author: Lukasz Lenart <[email protected]>
AuthorDate: Thu Dec 23 08:27:36 2021 +0100
Rephrases log4j versioning
---
source/announce-2021.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/source/announce-2021.md b/source/announce-2021.md
index afc927b..538ffd2 100644
--- a/source/announce-2021.md
+++ b/source/announce-2021.md
@@ -19,7 +19,7 @@ The Apache Struts group is pleased to announce that Struts
2.5.28.2 is available
release. The GA designation is our highest quality grade.
This release addresses Log4j vulnerability
[CVE-2021-45105](https://logging.apache.org/log4j/2.x/security.html#CVE-2021-45105)
-by using the latest Log4j 2.12.3 version (Java 1.7 compatible).
+by using the latest Log4j ver. 2.12.3 (Java 1.7 compatible).
**Please note, that the Apache Struts itself depends on the log4j-api package
only, it's users' responsibility
to use a proper version of the log4j-core package!**