Re: roller 6.1.0 release/log4j?
Michael Bien <[email protected]> Thu, 16 Dec 2021 23:49:30 +0100
| Newsgroups | gmane.comp.java.roller.devel |
|---|---|
| Message-ID | <[email protected]> |
it is currently in the voting process. more info and link to the candidate in that mail: https://mail-archives.apache.org/mod_mbox/roller-dev/202112.mbox/%3CCAF1aazBVAwdj8wofDHt1Fj2LapBz%3Dfwgegs64EaA7qf-08ZdTQ%40mail.gmail.com%3E feel free to test it and give feedback. best regards, michael On 16.12.21 19:32, Jennifer Oxelson Ganter wrote: > Hi all, > > I see there is a 6.1.0 pending release that addresses the log4j exploits > named in CVE-2021-44228 and CVE-2021-45046. > > https://github.com/apache/roller/blob/8d5c6c4f8ffcd142e522204688a330a60665a666/app/pom.xml > > When will that be available? > > (Currently your downloads page still shows v6.0.2 as the best release.) > > Thank you, > Jennifer >