summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBin Yang <bin.yang@windriver.com>2022-03-17 12:45:59 +0800
committerBin Yang <bin.yang@windriver.com>2022-03-17 12:45:59 +0800
commitf2a54b5dec59e27ebb57efb5ff88956fca96c986 (patch)
treeae815980c07a10e23b8c6ba9938cec4a2d4e092b
parent5a1033f0b65fc7f7c3d2ec82047ca1caf1c1d5a4 (diff)
Updated releast notes for transitive dependency on multicloud log4j1.7.3
Issue-ID: MULTICLOUD-1448 Signed-off-by: Bin Yang <bin.yang@windriver.com> Change-Id: I110e10a631542d03e2aee0b4bd7a71a78b34803a
-rw-r--r--docs/release-notes.rst15
1 files changed, 15 insertions, 0 deletions
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 8ba0858..1c189ea 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -16,6 +16,21 @@ This document provides the release notes for the ``istanbul`` release.
Summary
=======
+
+Version: 9.0.1
+--------------
+
+The ``istanbul`` maintenance release addresses some vulnerabilities mainly
+for the log4j dependencies.
+
+- Updated the direct dependency log4j libraries to 2.14.1
+- Please note log4j is still on older versions in a transitive dependencies for
+ * onap/multicloud-framework-artifactbroker:1.7.2
+
+
+Version: 9.0.0
+--------------
+
This release introduces new features in k8splugin, including many bug-fixes bringing better compatibility with Helm 3.5 specification.
Release Data