[LOG4J2-3239] Log4j-core-2.16.0.jar has a different MD5 in Maven Central!

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.16.0
• Component/s: Core
• Assignee: Unassigned
• Reporter: Kami Shishegar
• Created: 15/Dec/21 22:07
• Updated: 18/Dec/21 02:58

Description

Log4j-core-2.16.0.jar has a different MD5 in Maven Central!
https://downloads.apache.org/logging/log4j/2.16.0/
$ md5sum apache-log4j-2.16.0-bin/log4j-core-2.16.0.jar
cf0634270eafdbb083eb5951d7f2232d  apache-log4j-2.16.0-bin/log4j-core-2.16.0.jar
 

https://search.maven.org/search?q=a:log4j-core
$ md5sum log4j-core-2.16.0.jar
9f41928a418200de2232dd326e522cc7  log4j-core-2.16.0.jar
 
diff -r log4j-core-2.16.0 ../log4j-core-2.16.0
diff -r log4j-core-2.16.0/META-INF/MANIFEST.MF ../log4j-core-2.16.0/META-INF/MANIFEST.MF
5c5
< Bnd-LastModified: 1639373735804
—
> Bnd-LastModified: 1639374077682