From 10db401f30e68f81f7acb5c947fd1d2212f75c7e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Such=C3=A1nek?= Date: Mon, 13 Dec 2021 11:05:06 +0100 Subject: [PATCH 1/2] Bump log4j (because CVE-2021-44228 vulnerability) --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index 9ccfba765..32e3b82f9 100644 --- a/pom.xml +++ b/pom.xml @@ -64,6 +64,7 @@ 0.11.2 1.18.20 0.1.2-SNAPSHOT + 2.15.0 4.1 From 70ae124fb391d2c3a26f1a3d3d2fcd106db5c728 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Such=C3=A1nek?= Date: Mon, 13 Dec 2021 11:08:27 +0100 Subject: [PATCH 2/2] Hotfix 1.12.1 --- CHANGELOG.md | 8 ++++++++ pom.xml | 2 +- src/main/resources/application.yml | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0a73d0725..bd7c3bc0f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,12 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [Unreleased] +## [1.12.1] + +### Changed + +- Forcing log4j (indirect dependency) to v2.15.0 due to [vulnerability](https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot) + ## [1.12.0] ### Added @@ -238,3 +244,5 @@ The first release of reference FAIR Data Point implementation. [1.9.0]: /../../tree/v1.9.0 [1.10.0]: /../../tree/v1.10.0 [1.11.0]: /../../tree/v1.11.0 +[1.12.0]: /../../tree/v1.12.0 +[1.12.1]: /../../tree/v1.12.1 diff --git a/pom.xml b/pom.xml index 32e3b82f9..254e556c3 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ nl.dtls fairdatapoint - 1.12.0 + 1.12.1 jar FairDataPoint diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml index 5df974703..5ccd9cc92 100644 --- a/src/main/resources/application.yml +++ b/src/main/resources/application.yml @@ -59,7 +59,7 @@ metadataProperties: openapi: title: FAIR Data Point API - version: 1.12.0 + version: 1.12.1 description: "The reference implementation of the metadata registration service: A service implementing the API specification. It contains an authentication system to allow maintainers to define and update metadata. Read-only access to the data is public." contact: name: Luiz Bonino