+1
I wrote a simple HelloWorld app with 2.3.1 running on jdk1.6.0_45 to
further verfiy LOG4J2-3198. These commands ran successfully too:
mvn clean install
mvn site -DskipTests
mvn apache-rat:check -DskipTests
Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
Maven home: C:\projects\apache-maven-3.8.4
Java version: 1.8.0_181, vendor: Oracle Corporation, runtime: C:\Program
Files\Java\jdk1.8.0_181\jre
Default locale: en_US, platform encoding: Cp1252
OS name: "windows 10", version: "10.0", arch: "amd64", family: "windows"
On 12/21/2021 12:18 AM, Ralph Goers wrote:
This is a vote to release Log4j 2.3.1, a security release for Java 6 users.
Please download, test, and cast your votes on the log4j developers list.
[] +1, release the artifacts
[] -1, don't release because...
The vote will remain open for as short amount as time as required to vet the
release. All votes are welcome and we encourage everyone to test the release,
but only Logging PMC votes are “officially” counted. As always, at least 3 +1
votes and more positive than negative votes are required.
Changes in this version include:
New features:
* LOG4J2-3198: Pattern layout no longer enables lookups within message text.
Fixed Bugs:
* LOG4J2-3242: Limit JNDI to the java protocol only. JNDI will remain
disabled by default. Rename JNDI enablement property from
'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector’.
* LOG4J2-3230: Fix string substitution recursion.
Tag:
a) for a new copy do "git clone https://github.com/apache/logging-log4j2.git"; and then
"git checkout tags/log4j-2.3.1-rc1” or just "git clone -b log4j-2.3.1-rc1
https://github.com/apache/logging-log4j2.git";
b) for an existing working copy to “git pull” and then “git checkout
tags/log4j-2.12.3-rc1”
Web Site: https://logging.staged.apache.org/log4j/log4j-2.3.1/index.html
Maven Artifacts:
https://repository.apache.org/content/repositories/orgapachelogging-1076
Distribution archives: https://dist.apache.org/repos/dist/dev/logging/log4j/
You may download all the Maven artifacts by executing:
wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate
https://repository.apache.org/content/repositories/orgapachelogging-1076/org/apache/logging/log4j/.
