+1 I did the same steps as Rob but I only used Java 8:
- mvn apache-rat:check -DskipTests - mvn clean install - mvn site -DskipTests openjdk version "1.8.0_312" OpenJDK Runtime Environment (build 1.8.0_312-bre_2021_10_20_23_15-b00) OpenJDK 64-Bit Server VM (build 25.312-b00, mixed mode) Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537) Maven home: /usr/local/Cellar/maven/3.8.4/libexec Java version: 1.8.0_312, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "12.1", arch: "x86_64", family: "mac" Darwin *** 21.2.0 Darwin Kernel Version 21.2.0: Sun Nov 28 20:28:54 PST 2021; root:xnu-8019.61.5~1/RELEASE_X86_64 x86_64 Gary On Tue, Dec 21, 2021 at 3:51 PM Ron Grabowski <rongrabow...@yahoo.com.invalid> wrote: > +1 > > I wrote a simple HelloWorld app with 2.3.1 running on jdk1.6.0_45 to > further verfiy LOG4J2-3198. These commands ran successfully too: > > mvn clean install > mvn site -DskipTests > mvn apache-rat:check -DskipTests > > Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537) > Maven home: C:\projects\apache-maven-3.8.4 > Java version: 1.8.0_181, vendor: Oracle Corporation, runtime: C:\Program > Files\Java\jdk1.8.0_181\jre > Default locale: en_US, platform encoding: Cp1252 > OS name: "windows 10", version: "10.0", arch: "amd64", family: "windows" > > On 12/21/2021 12:18 AM, Ralph Goers wrote: > > This is a vote to release Log4j 2.3.1, a security release for Java 6 > users. > > > > Please download, test, and cast your votes on the log4j developers list. > > [] +1, release the artifacts > > [] -1, don't release because... > > > > The vote will remain open for as short amount as time as required to vet > the release. All votes are welcome and we encourage everyone to test the > release, but only Logging PMC votes are “officially” counted. As always, at > least 3 +1 votes and more positive than negative votes are required. > > > > Changes in this version include: > > > > > > New features: > > * LOG4J2-3198: Pattern layout no longer enables lookups within message > text. > > > > Fixed Bugs: > > * LOG4J2-3242: Limit JNDI to the java protocol only. JNDI will remain > disabled by default. Rename JNDI enablement property from > > 'log4j2.enableJndi' to 'log4j2.enableJndiLookup', > 'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector’. > > * LOG4J2-3230: Fix string substitution recursion. > > > > Tag: > > a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git" and then "git checkout > tags/log4j-2.3.1-rc1” or just "git clone -b log4j-2.3.1-rc1 > https://github.com/apache/logging-log4j2.git" > > b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.3-rc1” > > > > Web Site: > https://logging.staged.apache.org/log4j/log4j-2.3.1/index.html > > > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1076 > > > > Distribution archives: > https://dist.apache.org/repos/dist/dev/logging/log4j/ > > > > You may download all the Maven artifacts by executing: > > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1076/org/apache/logging/log4j/ > . >