summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBin Yang <bin.yang@windriver.com>2022-03-17 12:45:59 +0800
committerBin Yang <bin.yang@windriver.com>2022-03-17 04:53:43 +0000
commit0b77cc36d0cdc047b82a6a26d2a8e8005170c07f (patch)
tree24641834b0489863e6a2995a93aeaae26b9a0377
parentad52ed17f65fb21aee7b118feba2a0cb467d0bc8 (diff)
Updated releast notes for transitive dependency on multicloud log4j
Issue-ID: MULTICLOUD-1448 Signed-off-by: Bin Yang <bin.yang@windriver.com> Change-Id: I110e10a631542d03e2aee0b4bd7a71a78b34803a
-rw-r--r--docs/release-notes.rst15
1 files changed, 15 insertions, 0 deletions
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 8ba0858..1c189ea 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -16,6 +16,21 @@ This document provides the release notes for the ``istanbul`` release.
Summary
=======
+
+Version: 9.0.1
+--------------
+
+The ``istanbul`` maintenance release addresses some vulnerabilities mainly
+for the log4j dependencies.
+
+- Updated the direct dependency log4j libraries to 2.14.1
+- Please note log4j is still on older versions in a transitive dependencies for
+ * onap/multicloud-framework-artifactbroker:1.7.2
+
+
+Version: 9.0.0
+--------------
+
This release introduces new features in k8splugin, including many bug-fixes bringing better compatibility with Helm 3.5 specification.
Release Data