You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@logging.apache.org by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2024/01/03 11:58:27 UTC
[PR] Move `o.a.l.l.core.parser` to samples (logging-log4j2)
ppkarwasz opened a new pull request, #2154:
URL: https://github.com/apache/logging-log4j2/pull/2154
We move `o.a.l.l.core.parser` to the samples repository, since it is independent from Log4j Core and unused:
https://github.com/apache/logging-log4j-samples/commit/de33cee6c8d3e6cf32bf3e709e360cbb961755a0
This code is potentially (transitively) exploitable each time Jackson has a deserialization vulnerability.
Part of #2016.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Move `o.a.l.l.core.parser` to samples (logging-log4j2)
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz commented on PR #2154:
URL: https://github.com/apache/logging-log4j2/pull/2154#issuecomment-1876951890
@sanova,
Do you need us to move `o.a.l.l.core.parser` to a new module instead of removing it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Move `o.a.l.l.core.parser` to samples (logging-log4j2)
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz merged PR #2154:
URL: https://github.com/apache/logging-log4j2/pull/2154
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Move `o.a.l.l.core.parser` to samples (logging-log4j2)
Posted by "mikaelstaldal (via GitHub)" <gi...@apache.org>.
mikaelstaldal commented on PR #2154:
URL: https://github.com/apache/logging-log4j2/pull/2154#issuecomment-1875281489
Oh, I have not been active in this project for a long time, so I don't have any objections.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Move `o.a.l.l.core.parser` to samples (logging-log4j2)
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz commented on PR #2154:
URL: https://github.com/apache/logging-log4j2/pull/2154#issuecomment-1875262433
@mikaelstaldal, do you agree with this refactoring or did you plan to use the event parser in `log4j-core`?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org