Update Log4J2 Version #38

Activity

1. carlzogh commented on May 20, 2020

   

   carlzogh

   on May 20, 2020

   Last edited by carlzogh

   Contributor

   More actions

   Hey @feinstein - Log4j dependencies have been updated to 2.13.2 as part of aws-lambda-java-log4j2 version 1.2.0.

   ref: https://github.com/aws/aws-lambda-java-libs/blob/master/aws-lambda-java-log4j2/RELEASE.CHANGELOG.md
2. carlzogh

   closed this as completedon May 20, 2020
3. feinstein commented on May 20, 2020

   

   feinstein

   on May 20, 2020

   Author

   More actions

   Thanks, but seriously you guys need to rethink your worfklow. It took 2 years and a half to update a library reference.

   This is specially troublesome as "Using Components with Known Vulnerabilities" is the OWASP 9th most security risk.
4. dtorok

   added a commit that references this issue on Sep 4, 2023

   [alc] fix nullpointer exception when logging null (#38)

   ...

   a303f32
5. smirnoal

   added a commit that references this issue on Sep 4, 2023

   [alc] fix nullpointer exception when logging null (#38) (#439)

   ...

   5777886
6. M-Elsaeed

   added a commit that references this issue on Dec 4, 2025

   [alc] fix nullpointer exception when logging null (#38)

   ...

   445e433