LOG4J2-1958 Mention in release notes
Project: http://git-wip-us.apache.org/repos/asf/logging-log4j2/repo Commit: http://git-wip-us.apache.org/repos/asf/logging-log4j2/commit/df34929c Tree: http://git-wip-us.apache.org/repos/asf/logging-log4j2/tree/df34929c Diff: http://git-wip-us.apache.org/repos/asf/logging-log4j2/diff/df34929c Branch: refs/heads/LOG4J2-1958 Commit: df34929c8237467a53e2a6df660ad31d6dc213b6 Parents: 002a193 Author: Mikael Ståldal <[email protected]> Authored: Thu Jun 29 17:50:16 2017 +0200 Committer: Mikael Ståldal <[email protected]> Committed: Thu Jun 29 17:50:16 2017 +0200 ---------------------------------------------------------------------- src/changes/announcement.vm | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/logging-log4j2/blob/df34929c/src/changes/announcement.vm ---------------------------------------------------------------------- diff --git a/src/changes/announcement.vm b/src/changes/announcement.vm index e06994e..d4a71ca 100644 --- a/src/changes/announcement.vm +++ b/src/changes/announcement.vm @@ -50,6 +50,30 @@ temporary objects) while logging. In addition, Log4j 2 will not lose events whil This release primarily contains bugfixes and minor enhancements. More details on the new features and fixes are itemized below. +Note that subsequent to the 2.9 release, for security reasons, SerializedLayout is deprecated and no +longer used as default in the Socket and JMS appenders. SerializedLayout can still be used as before, +but has to be specified explicitly. To retain old behaviour, you have to change configuration like: + + <Appenders> + <Socket name="socket" host="localhost" port="9500"/> + </Appenders> + +into: + + <Appenders> + <Socket name="socket" host="localhost" port="9500"> + <SerializedLayout/> + </Socket> + </Appenders> + +We do, however, discourage the use of SerializedLayout and recommend JsonLayout as a replacement: + + <Appenders> + <Socket name="socket" host="localhost" port="9500"> + <JsonLayout properties="true"/> + </Socket> + </Appenders> + Note that subsequent to the 2.9 release, for security reasons, Log4j does not process DTD in XML files. If you used DTD for including snippets, you have to use XInclude or Composite Configuration instead.
