You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@logging.apache.org by rg...@apache.org on 2021/12/16 07:25:39 UTC

[logging-log4j2] branch release-2.x updated (d8e2d4a -> 95b24f7)

This is an automated email from the ASF dual-hosted git repository.

rgoers pushed a change to branch release-2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git.


    from d8e2d4a  [DOC] add credit to 4ra1n for reporting related to CVE-2021-45046
     add 95b24f7  LOG4J2-3242 - Limit JNDI to only the java protocol.

No new revisions were added by this update.

Summary of changes:
 log4j-core/revapi.json                             |  30 +++++
 .../log4j/core/appender/mom/JmsAppender.java       |  42 +-----
 .../apache/logging/log4j/core/net/JndiManager.java | 125 ++----------------
 .../core/lookup/JndiRestrictedLookupTest.java      | 145 +--------------------
 src/changes/changes.xml                            |   3 +
 5 files changed, 48 insertions(+), 297 deletions(-)