From: Bin Yang <bin.yang@windriver.com>
Date: Thu, 17 Mar 2022 04:45:59 +0000 (+0800)
Subject: Updated releast notes for transitive dependency on multicloud log4j
X-Git-Tag: 1.7.3^0
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=multicloud%2Fframework.git;a=commitdiff_plain;h=f2a54b5dec59e27ebb57efb5ff88956fca96c986

Updated releast notes for transitive dependency on multicloud log4j

Issue-ID: MULTICLOUD-1448

Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: I110e10a631542d03e2aee0b4bd7a71a78b34803a
---

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 8ba0858..1c189ea 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -16,6 +16,21 @@ This document provides the release notes for the ``istanbul`` release.
 Summary
 =======
 
+
+Version: 9.0.1
+--------------
+
+The ``istanbul`` maintenance release addresses some vulnerabilities mainly
+for the log4j dependencies.
+
+- Updated the direct dependency log4j libraries to 2.14.1
+- Please note log4j is still on older versions in a transitive dependencies for
+  * onap/multicloud-framework-artifactbroker:1.7.2
+
+
+Version: 9.0.0
+--------------
+
 This release introduces new features in k8splugin, including many bug-fixes bringing better compatibility with Helm 3.5 specification.
 
 Release Data