[LOG4J2-2743] Spring Boot Starters(2.0.8) still refers to log4j2 2.10.0 libraries in Maven Central

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 2.13.0
• Component/s: Build
• Assignee: Unassigned
• Reporter: Buks van der Lingen
• Created: 23/Dec/19 09:36
• Updated: 24/Dec/19 15:58
• Resolved: 23/Dec/19 14:18

Description

[https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-log4j2/2.0.8.RELEASE]

reflects that log4j2 libs are updated to 2.13.0 but repositories still contain 2.10.0 jars.

[https://repo.spring.io/release/org/springframework/boot/spring-boot-starter-log4j2/2.0.8.RELEASE/spring-boot-starter-log4j2-2.0.8.RELEASE.pom]

[https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-log4j2/2.0.8.RELEASE/spring-boot-starter-log4j2-2.0.8.RELEASE.pom]