[MGNLEE-130] RC4 contains both log4j-1.2.14.jar and log4j-1.2.15.jar Created: 02/Mar/09  Updated: 23/Jun/14  Resolved: 04/Mar/09

Status: Closed
Project: Magnolia DX Core
Component/s: None
Affects Version/s: None
Fix Version/s: 4.0.1

Type: Bug Priority: Critical
Reporter: Boris Kraft Assignee: Jan Haderka
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[ ]* Steps to reproduce, expected, and actual results filled
[ ]* Affected version filled
Date of First Response:

 Description   

In my lib, both log4j-1.2.14.jar and log4j-1.2.15.jar are found - drop whichever is not needed.



 Comments   
Comment by Philipp Bracher [ 03/Mar/09 ]

Normally this duplicated dependencies are introduced by war dependencies (overlay of WEB-INF/lib).

Comment by Jan Haderka [ 04/Mar/09 ]

The same goes also for commons-digester (1.7 vs. 1.8.1) and pdfbox (0.7.1 vs. 0.7.3), but only ee bundle is affected. CE is fine and contains only newer versions of those libraries.

Comment by Jan Haderka [ 04/Mar/09 ]

Indeed all those dependencies are defined directly in enterprise webapp pom. Updated as of r23124.

Generated at Mon Feb 12 05:26:59 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.