You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by rg...@apache.org on 2021/12/28 19:14:43 UTC
[logging-log4j2] branch release-2.x updated: Add info for 2.17.1
This is an automated email from the ASF dual-hosted git repository.
rgoers pushed a commit to branch release-2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/release-2.x by this push:
new 7a76441 Add info for 2.17.1
7a76441 is described below
commit 7a76441482f9730cbbbc3c07437cdfe13179347b
Author: Ralph Goers <rg...@apache.org>
AuthorDate: Tue Dec 28 12:14:27 2021 -0700
Add info for 2.17.1
---
RELEASE-NOTES.md | 55 +++++++++++++++++++++------------------------
src/changes/announcement.vm | 32 ++++++++++----------------
src/changes/changes.xml | 4 ++++
3 files changed, 41 insertions(+), 50 deletions(-)
diff --git a/RELEASE-NOTES.md b/RELEASE-NOTES.md
index 57040f8..2e19972 100644
--- a/RELEASE-NOTES.md
+++ b/RELEASE-NOTES.md
@@ -29,22 +29,14 @@ The artifacts may be downloaded from https://logging.apache.org/log4j/2.x/downlo
This release contains the changes noted below:
-* Address CVE-2021-45105.
-* Require components that use JNDI to be enabled individually via system properties.
-* Remove LDAP and LDAPS as supported protocols from JNDI.
+* Address CVE-2021-44832.
+* Other minor fixes.
Due to a break in compatibility in the SLF4J binding, Log4j now ships with two versions of the SLF4J to Log4j adapters.
log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and log4j-slf4j18-impl should be used with SLF4J 1.8.x and
later. SLF4J-2.0.0 alpha releases are not fully supported. See https://issues.apache.org/jira/browse/LOG4J2-2975 and
https://jira.qos.ch/browse/SLF4J-511.
-Some of the changes in Log4j 2.17.1 include:
-
-* Disable recursive evaluation of Lookups during log event processing. Recursive evaluation is still allwoed while
-generating the configuration.
-* The JndiLookup, JndiContextSelector, and JMSAppender now require individual system properties to be enabled.
-* Removed support for the LDAP and LDAPS protocols via JNDI.
-
The Log4j 2.17.1 API, as well as many core components, maintains binary compatibility with previous releases.
## GA Release 2.17.1
@@ -53,26 +45,29 @@ Changes in this version include:
### Fixed Bugs
- * [LOG4J2-3290](https://issues.apache.org/jira/browse/LOG4J2-3290):
- Remove unused method.
- * [LOG4J2-3292](https://issues.apache.org/jira/browse/LOG4J2-3292):
- ExtendedLoggerWrapper.logMessage no longer double-logs when location is requested.
- * [LOG4J2-3289](https://issues.apache.org/jira/browse/LOG4J2-3289):
- log4j-to-slf4j no longer re-interpolates formatted message contents.
- * [LOG4J2-3204](https://issues.apache.org/jira/browse/LOG4J2-3204):
- Correct SpringLookup package name in Interpolator. Thanks to Francis-FY.
- * [LOG4J2-3284](https://issues.apache.org/jira/browse/LOG4J2-3284):
- log4j-to-slf4j takes the provided MessageFactory into account Thanks to Michael Vorburger.
- * [LOG4J2-3264](https://issues.apache.org/jira/browse/LOG4J2-3264):
- Fix MapLookup to lookup MapMessage before DefaultMap Thanks to Yanming Zhou.
- * [LOG4J2-3274](https://issues.apache.org/jira/browse/LOG4J2-3274):
- Buffered I/O checked had inverted logic in RollingFileAppenderBuidler. Thanks to Faisal Khan Thayub Khan.
- * [](https://issues.apache.org/jira/browse/LOG4J2-3274):
- Fix NPE when input is null in StrSubstitutor.replace(String, Properties).
- * [LOG4J2-3270](https://issues.apache.org/jira/browse/LOG4J2-3270):
- Lookups with no prefix only read values from the configuration properties as expected.
- * [LOG4J2-3256](https://issues.apache.org/jira/browse/LOG4J2-3256):
- Reduce ignored package scope of KafkaAppender. Thanks to Lee Dongjin.
+* [LOG4J2-3293](https://issues.apache.org/jira/browse/LOG4J2-3293):
+JdbcAppender now uses JndiManager to access JNDI resources. JNDI is only enabled when system property
+ log4j2.enableJndiJdbc is set to true.
+* [LOG4J2-3290](https://issues.apache.org/jira/browse/LOG4J2-3290):
+Remove unused method.
+* [LOG4J2-3292](https://issues.apache.org/jira/browse/LOG4J2-3292):
+ExtendedLoggerWrapper.logMessage no longer double-logs when location is requested.
+* [LOG4J2-3289](https://issues.apache.org/jira/browse/LOG4J2-3289):
+log4j-to-slf4j no longer re-interpolates formatted message contents.
+* [LOG4J2-3204](https://issues.apache.org/jira/browse/LOG4J2-3204):
+Correct SpringLookup package name in Interpolator. Thanks to Francis-FY.
+* [LOG4J2-3284](https://issues.apache.org/jira/browse/LOG4J2-3284):
+log4j-to-slf4j takes the provided MessageFactory into account Thanks to Michael Vorburger.
+* [LOG4J2-3264](https://issues.apache.org/jira/browse/LOG4J2-3264):
+Fix MapLookup to lookup MapMessage before DefaultMap Thanks to Yanming Zhou.
+* [LOG4J2-3274](https://issues.apache.org/jira/browse/LOG4J2-3274):
+Buffered I/O checked had inverted logic in RollingFileAppenderBuidler. Thanks to Faisal Khan Thayub Khan.
+* [](https://issues.apache.org/jira/browse/LOG4J2-3274):
+Fix NPE when input is null in StrSubstitutor.replace(String, Properties).
+* [LOG4J2-3270](https://issues.apache.org/jira/browse/LOG4J2-3270):
+Lookups with no prefix only read values from the configuration properties as expected.
+* [LOG4J2-3256](https://issues.apache.org/jira/browse/LOG4J2-3256):
+Reduce ignored package scope of KafkaAppender. Thanks to Lee Dongjin.
---
diff --git a/src/changes/announcement.vm b/src/changes/announcement.vm
index 9dbeb17..916d507 100644
--- a/src/changes/announcement.vm
+++ b/src/changes/announcement.vm
@@ -20,19 +20,19 @@
#set($relVersion=$announceParameters.releaseVersion)
#set($relCount=$announceParameters.releaseCount)
#macro(formatAction $item)
- ## Use replaceAll to fix up LF-only line ends on Windows.
- ## Also replace < and > with entity versions to avoid HTML being misinterpreted.
- #set($action=$item.action.replaceAll("\n","
+## Use replaceAll to fix up LF-only line ends on Windows.
+## Also replace < and > with entity versions to avoid HTML being misinterpreted.
+#set($action=$item.action.replaceAll("\n","
").replaceAll("<", "<").replaceAll(">", ">"))
- #if($item.issue)
- #set($issue = $item.issue)
- #set($url = "https://issues.apache.org/jira/browse/$issue")
- #else
- #set($issue = "")
- #end
+#if($item.issue)
+#set($issue = $item.issue)
+#set($url = "https://issues.apache.org/jira/browse/$issue")
+#else
+#set($issue = "")
+#end
* #if($issue)[$issue]($url):#end
- ${action}#if($item.dueTo) Thanks to ${item.dueTo}.#end
+${action}#if($item.dueTo) Thanks to ${item.dueTo}.#end
#end
## -----------------------------------------
@@ -67,22 +67,14 @@ The artifacts may be downloaded from https://logging.apache.org/log4j/2.x/downlo
This release contains the changes noted below:
-* Address CVE-2021-45105.
-* Require components that use JNDI to be enabled individually via system properties.
-* Remove LDAP and LDAPS as supported protocols from JNDI.
+* Address CVE-2021-44832.
+* Other minor fixes.
Due to a break in compatibility in the SLF4J binding, Log4j now ships with two versions of the SLF4J to Log4j adapters.
log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and log4j-slf4j18-impl should be used with SLF4J 1.8.x and
later. SLF4J-2.0.0 alpha releases are not fully supported. See https://issues.apache.org/jira/browse/LOG4J2-2975 and
https://jira.qos.ch/browse/SLF4J-511.
-Some of the changes in Log4j ${relVersion} include:
-
-* Disable recursive evaluation of Lookups during log event processing. Recursive evaluation is still allwoed while
-generating the configuration.
-* The JndiLookup, JndiContextSelector, and JMSAppender now require individual system properties to be enabled.
-* Removed support for the LDAP and LDAPS protocols via JNDI.
-
The Log4j ${relVersion} API, as well as many core components, maintains binary compatibility with previous releases.
## Hack to improve layout: replace all pairs of spaces with a single new-line
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index fdfc8d2..a25e90c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -31,6 +31,10 @@
-->
<release version="2.17.1" date="2021-12-27" description="GA Release 2.17.1">
<!-- FIXES -->
+ <action issue="LOG4J2-3293" dev="ggregory" type="fix">
+ JdbcAppender now uses JndiManager to access JNDI resources. JNDI is only enabled when system property
+ log4j2.enableJndiJdbc is set to true.
+ </action>
<action issue="LOG4J2-3290" dev="rogers" type="fix">
Remove unused method.
</action>