From 371c48d2c287f75c33acc439c94960e8ff345d12 Mon Sep 17 00:00:00 2001 From: Peter Zhu Date: Wed, 22 Dec 2021 12:33:07 -0500 Subject: [PATCH] Add OpenSearch 1.2.3 Release Notes Files (#1399) Signed-off-by: Peter Zhu --- .../opensearch-release-notes-1.2.3.md | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 release-notes/opensearch-release-notes-1.2.3.md diff --git a/release-notes/opensearch-release-notes-1.2.3.md b/release-notes/opensearch-release-notes-1.2.3.md new file mode 100644 index 0000000000..5f4ed12c35 --- /dev/null +++ b/release-notes/opensearch-release-notes-1.2.3.md @@ -0,0 +1,23 @@ +# OpenSearch 1.2.3 Release Notes + +## Release Highlights + +This patch releases updates the version of Log4j used in OpenSearch to Log4j 2.17.0 as recommended by the advisory in [CVE-2021-45105](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105). + +### OpenSearch + +* Increment version to 1.2.3 and backport log4j upgrade to 2.17.0 ([#1771](https://github.com/opensearch-project/OpenSearch/pull/1771)) + +### OpenSearch Security + +* Bump log4j-core from 2.16.0 to 2.17.0 ([#1535](https://github.com/opensearch-project/security/pull/1535)) + +### OpenSearch SQL + +* Bump log4j from 2.16.0 to 2.17.0 ([#345](https://github.com/opensearch-project/sql/pull/345)) + + +### OpenSearch Performance Analyzer + +* Upgrade log4j version from 2.16.0 to 2.17.0 ([#109](https://github.com/opensearch-project/performance-analyzer/pull/109)) +* Upgrade log4j version from 2.16.0 to 2.17.0 ([#105](https://github.com/opensearch-project/performance-analyzer-rca/pull/105))