Apache Log4j官网安全更新(2020-04-23)

情报来源:TSRC

发布时间:2020-04-23

基本信息
  • 发布日期2020-04-23
  • 感知时间2020-04-23
  • 漏洞类型安全更新
  • 风险等级未知
  • 更新版本2.13.2
  • 情报贡献TSRC
更新标题

GA Release 2.13.2

更新详情

<br><br>Type<br>Changes<br>By<br><br><br>Implement requiresLocation in GelfLayout to reflect whether location information is used in the message Pattern. Fixes LOG4J2-2824. Thanks to CrazyBills.<br>rgoers<br><br><br>Add option to restore printing timeMillis in the JsonLayout. Fixes LOG4J2-2588.<br>rgoers<br><br><br>Initialize pattern processor before triggering policy during reconriguration. Fixes LOG4J2-2766.<br>rgoers<br><br><br>Allow the file extension in the file pattern to be modified during reconfiguration. Fixes LOG4J2-2457.<br>rgoers<br><br><br>Add information about using a url in log4j.configurationFile. Fixes LOG4J2-2810.<br>rgoers<br><br><br>serializeToBytes was checking wrong variable for null. Fixes LOG4J2-2813. Thanks to Keith D Gregory.<br>rgoers<br><br><br>Fix Javadoc for ScriptPatternSelector. Fixes LOG4J2-2814.<br>rgoers<br><br><br>Allow trailing and leading spaces in log level. Fixes LOG4J2-2793. Thanks to Renukaprasad C.<br>rgoers<br><br><br>Add support for specifying an SSL configuration for SmtpAppender. Fixes LOG4J2-2819.<br>mattsicker<br><br><br>Allow servlet context path to be retrieved without "/". Fixes LOG4J2-2520.<br>rgoers<br><br><br>Allow Spring Lookup to return default and active profiles. Fixes LOG4J2-2818.<br>rgoers<br><br><br>Correct JsonLayout timestamp sorting issue. Fixes LOG4J2-2791. Thanks to Johan Karlberg.<br>rgoers<br><br><br>Allow the file size action to parse the value without being sensitive to the current locale. Fixes LOG4J2-2817. Thanks to Trejkaz.<br>rgoers<br><br><br>Make YamlLayoutTest more resiliant to environmental differences. Fixes LOG4J2-2794. Thanks to Johan Karlberg.<br>rgoers<br><br><br>Allow Spring Boot applications to use composite configuratons. Fixes LOG4J2-2815.<br>rgoers<br><br><br>Provide a Log4j implementation of System.Logger. Fixes LOG4J2-1360. Thanks to Kevin Leturc.<br>rgoers<br><br><br>Conditionally allocate PluginEntry during PluginCache loading. Fixes LOG4J2-2790. Thanks to Marius Volkhart.<br>rgoers<br><br><br>Add missing includeLocation parameter when creating AsyncLogger. Fixes LOG4J2-2811. Thanks to Kuojian21.<br>rgoers<br><br><br>Fix Exceptions when whitespace is in the file path and Java security manager is used. Fixes LOG4J2-2761. Thanks to Uwe Schindler.<br>rgoers<br><br><br>Avoid NullPointerException when StackWalker returns null. Fixes LOG4J2-2809. Thanks to Romain Manni-Bucau.<br>rgoers<br><br><br>Added EventLookup to retrieve fields from the log event. Fixes LOG4J2-2807.<br>rgoers<br><br><br>TimeFilter did not handle daylight saving time transitions and did not support a range over 2 days. Fixes LOG4J2-2805.<br>rgoers<br><br><br>Add ContextDataProviders as an alternative to having to implement a ContextDataInjector. Fixes LOG4J2-2779.<br>rgoers<br><br><br>[JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager. Fixes LOG4J2-2812.<br>ggregory

软件描述

暂无

CVE编号

null

Knowsafe分析

暂无

业界资讯

暂无

来源链接

http://logging.apache.org/log4j/2.x/changes-report.html