We have released version 2.0.4 of Enrich, upgrading dependencies to address the recently identified Log4j 2 vulnerability (CVE-2021-44228).
The main highlights of this release are:
- Fix the version of
log4j-core(used only in
snowplow-stream-enrich-nsq) to 2.16.0.
- Bump the version of Beam to 2.33.0, as advised by GCP.
- Bump the version of KCL to 1.14.5, as advised by AWS.
We have also bumped other dependencies to ensure we’re on latest versions.
2.0.4 images can be pulled from Docker Hub.
For the full list of changes and
jar files, see the release notes: