Apache Log4j官网普通更新（2022-02-23）

基本信息

发布日期2022-02-23
感知时间2022-02-23
漏洞类型普通更新
风险等级未知
更新版本2.17.2
情报贡献TSRC

更新标题

GA Release 2.17.2

更新详情

Type Changes By Flag LogManager as initiialized if the LoggerFactory is provided as a property. Fixes LOG4J2-3304. Thanks to francis-FY. rgoers Fix DefaultConfiguration leak in PatternLayout. Fixes LOG4J2-3404. Thanks to Piotr Karwasz. ckozak Document that the Spring Boot Lookup requires the log4j-spring-boot dependency. Fixes LOG4J2-3405. rgoers Fix RoutingAppender backcompat and disallow recursive evaluation of lookup results outside of configuration properties. Fixes LOG4J2-3317. ckozak Fix ThreadContextDataInjector initialization deadlock. Fixes LOG4J2-3333. ckozak Fix substitutions when programmatic configuration is used. Fixes LOG4J2-3358. ckozak log4j-jpl formats message parameters correctly using MessageFormat. Fixes LOG4J2-3345. ckozak Replace usages of "compile" with "implementation" in the Gradle docs. Fixes LOG4J2-3215. Thanks to quapka. vy Change modifier of method org.apache.logging.log4j.core.tools.Generate#generate to public (was package private) to facilitate automated code generation. Fixes LOG4J2-3267. rpopma OptionConverter could cause a StackOverflowError. Fixes LOG4J2-3306. rgoers Log4j 1.2 bridge class ConsoleAppender should extend WriterAppender and provide better compatibility with custom appenders. ggregory Log4j 1.2 bridge method NDC.inherit(Stack) should not use generics to provide source compatibility. ggregory Log4j 1.2 bridge class PatternLayout is missing constants DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN. ggregory Log4j 1.2 bridge class PropertyConfigurator should implement Configurator. ggregory Log4j 1.2 bridge interface Configurator doConfigure() methods should use LoggerRepository, not LoggerContext. ggregory Log4j 1.2 bridge class OptionConverter is missing selectAndConfigure() methods. ggregory Log4j 1.2 bridge class Category should implement AppenderAttachable. ggregory Log4j 1.2 bridge method Category.exists(String) should be static. ggregory Log4j 1.2 bridge methods missing in org.apache.log4j.Category: getDefaultHierarchy(), getHierarchy(), getLoggerRepository(). ggregory Log4j 1.2 bridge class LogManager default constructor should be public. ggregory Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport was in the wrong package and incomplete. ggregory Log4j 1.2 bridge interfaces missing from package org.apache.log4j.spi: ThrowableRenderer, ThrowableRendererSupport, TriggeringEventEvaluator. ggregory Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap. ggregory Log4j 1.2 bridge PropertiesConfiguration.buildAppender not adding filters to custom appender. Fixes LOG4J2-3281. ggregory Log4j 1.2 bridge should ignore case in properties file keys. Fixes LOG4J2-3316. ggregory Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants. ggregory Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog. ggregory Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader. ggregory Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger. ggregory Log4j 1.2 bridge class Category is missing some protected instance variables. ggregory Log4j 1.2 bridge adds org.apache.log4j.Hierarchy. ggregory Log4j 1.2 bridge methods Category.getChainedPriority() and getEffectiveLevel() should not be final. ggregory Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository and NOPLogger. ggregory Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector. ggregory Log4j 1.2 bridge implements LogManager.getCurrentLoggers() fully. ggregory Log4j 1.2 bridge fixes parsing filters in properties configuration file #680. Fixes LOG4J2-3326. Thanks to Benjamin Röhl, Gary Gregory. ggregory Log4j 1.2 bridge missing OptionConverter.instantiateByKey(Properties, String, Class, Object). Fixes LOG4J2-3326. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent missing constructors and public instance variable. Fixes LOG4J2-3326. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge does not support system properties in log4j.xml. Fixes LOG4J2-3328. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge now logs a warning instead of throwing an NullPointerException when building a Syslog appender with a missing "SyslogHost" param. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge should allow property and XML attributes to start with either an upper-case or lower-case letter. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory Log4j 1.2 bridge uses the wrong default values for a TTCCLayout #709. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory Log4j 1.2 bridge throws ClassCastException when using SimpleLayout and others #708. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory Log4j 1.2 bridge uses the wrong file pattern for rolling file appenders #710. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory Log4j 1.2 bridge throws ClassCastException when using SimpleLayout and others #708. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory Log4j 1.2 bridge creates a SocketAppender instead of a SyslogAppender. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge uses some incorrect default property values in some appenders. Thanks to Piotr P. Karwasz. ggregory Log4j 1.2 bridge supports the SocketAppender. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing DefaultThrowableRenderer. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing some ThrowableInformation constructors. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing some LocationInfo constructors. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missed Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing UtilLoggingLevel. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing FormattingInfo. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing PatternConverter. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge missing PatternParser. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge issues with filters #753. Thanks to ppkarwasz, Gary Gregory. ggregory Log4j 1.2 bridge implements most of DOMConfigurator. Thanks to Gary Gregory. ggregory JndiManager reverts to 2.17.0 behavior: Read the system property for each call. ggregory Configurator.setLevel not fetching the correct LoggerContext. Fixes LOG4J2-3330. Thanks to Mircea Lemnaru, Gary Gregory. ggregory Fix DTD error: Add missing ELEMENT for Marker. ggregory Fix log4j-jakarta-web service file #723. Thanks to Gary Gregory, Piotr P. Karwasz. ggregory AppenderLoggingException logging any exception to a MongoDB Appender. Fixes LOG4J2-3392. Thanks to Gary Gregory, Omer U. ggregory Possible NullPointerException in MongoDb4DocumentObject, MongoDbDocumentObject, DefaultNoSqlObject. Fixes LOG4J2-3392. Thanks to Gary Gregory. ggregory Trim whitespace before parsing a String into an Integer. Thanks to Gary Gregory. ggregory Log4j 1.2 bridge throws a ClassCastException when logging a Map with non-String keys. Fixes LOG4J2-3410. Thanks to Barry Sham, Gary Gregory. ggregory Log4j 1.2 bridge Check for non-existent appender when parsing properties #761. Fixes LOG4J2-3407. Thanks to Kenny MacLeod. ggregory Log4j 1.2 bridge supports global threshold #764. Fixes LOG4J2-3407. Thanks to Piotr P. Karwasz. ggregory Limit loading of configuration via a url to https by default. Fixes LOG4J2-3297. rgoers Require log4j2.Script.enableLanguages to be specified to enable scripting for specific languages. Fixes LOG4J2-2486. rgoers Add TB support to FileSize. Fixes LOG4J2-3303. Thanks to ramananravi. vy Add the log4j-to-jul JDK Logging Bridge. Fixes LOG4J2-3282. Thanks to Michael Vorburger. ckozak Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders() to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders(). ggregory Add Configurator.setLevel(Logger, Level), setLevel(String, String), and setLevel(Class, Level). Thanks to Gary Gregory. ggregory Add shorthand syntax for properties configuration format for specifying a logger level and appender refs. Fixes LOG4J2-3341. rgoers Add optional additional fields to NoSQLAppender. Fixes LOG4J2-3391. Thanks to Gary Gregory. ggregory Bump Tomcat from 8.5.20 to 10.0.14 in log4j-appserver along with some dependency clean-up. Fixes LOG4J2-3368. vy Bump mongodb3.version from 3.12.4 to 3.12.10 #605. Thanks to Dependabot. ggregory Bump awaitility from 4.0.3 to 4.1.1 #663. Thanks to Dependabot. ggregory Bump Mockito from 3.11.2 to 4.2.0. Thanks to Gary Gregory. ggregory Bump Jackson from 2.12.4 to 2.13.1. Thanks to Gary Gregory. ggregory Bump org.junit.jupiter:junit-* from 5.7.2 to 5.8.2. Thanks to Gary Gregory. ggregory Bump org.springframework:spring-* from 5.3.13 to 5.3.15. Thanks to Gary Gregory. ggregory Bump de.flapdoodle.embed:de.flapdoodle.embed.mongo from 3.0.0 to 3.4.1. Update tests for binary incompatibilities in APIs. Thanks to Gary Gregory. ggregory Bump org.fusesource.jansi:jansi from 2.3.4 to 2.4.0. Thanks to Gary Gregory. ggregory Bump net.javacrumbs.json-unit:json-unit from 2.27.0 to 2.28.0. Thanks to Gary Gregory. ggregory Bump org.assertj:assertj-core from 3.20.2 to 3.22.0. Thanks to Gary Gregory. ggregory Bump org.xmlunit:xmlunit-* from 2.8.3 to 2.8.4. Thanks to Gary Gregory. ggregory Bump org.codehaus.groovy:groovy-* from 3.0.8 to 3.0.9. Thanks to Gary Gregory. ggregory Bump org.mongodb:bson from 4.2.2 to 4.5.0. Thanks to Gary Gregory. ggregory Bump org.mongodb:mongodb-driver-sync from 4.2.2 to 4.5.0. Thanks to Gary Gregory. ggregory Bump Woodstox 6.2.6 to 6.2.8. Thanks to Gary Gregory. ggregory Bump maven-compiler-plugin from 3.8.1 to 3.9.0. Thanks to Gary Gregory. ggregory Bump org.eclipse.persistence:org.eclipse.persistence.jpa from 2.7.9 to 2.7.10. Thanks to Gary Gregory. ggregory Bump org.junit-pioneer:junit-pioneer from 1.5.0 to 1.6.1. Thanks to Gary Gregory. ggregory Bump org.apache.activemq:activemq-broker from 5.16.3 to 5.16.4. Thanks to Gary Gregory. ggregory Bump org.jacoco:jacoco-maven-plugin from 0.8.6 to 0.8.7. Thanks to Gary Gregory. ggregory Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.3.1 to 3.3.2. Thanks to Gary Gregory. ggregory

软件描述

暂无

CVE编号

暂无

Knowsafe分析

暂无

业界资讯

暂无

来源链接

http://logging.apache.org/log4j/2.x/changes-report.html