This is an automated email from the ASF dual-hosted git repository.
FreeAndNil pushed a commit to branch Feature/security-audit-hardening
in repository https://gitbox.apache.org/repos/asf/logging-log4net.git
The following commit(s) were added to
refs/heads/Feature/security-audit-hardening by this push:
new 1c664f85 New PR number (#310)
1c664f85 is described below
commit 1c664f85b688006e6259eaf6f32e261ecdba979f
Author: Jan Friedrich <[email protected]>
AuthorDate: Tue Aug 18 10:43:13 2026 +0200
New PR number (#310)
---
.../{309-bound-file-lock-waits.xml => 310-bound-file-lock-waits.xml} | 2 +-
...nd-filter-regex-matching.xml => 310-bound-filter-regex-matching.xml} | 2 +-
...nt-adonet-failures.xml => 310-contain-per-event-adonet-failures.xml} | 2 +-
...-syslog-messages.xml => 310-escape-nul-in-local-syslog-messages.xml} | 2 +-
...-uses-the-appender-lock.xml => 310-flush-uses-the-appender-lock.xml} | 2 +-
...-maven-wrapper-checksums.xml => 310-pin-maven-wrapper-checksums.xml} | 2 +-
...g-errors.xml => 310-redact-password-in-connection-string-errors.xml} | 2 +-
...git-broadcast-workflow.xml => 310-remove-git-broadcast-workflow.xml} | 2 +-
...or-by-default.xml => 310-report-first-appender-error-by-default.xml} | 2 +-
...med-syslog-identity.xml => 310-report-malformed-syslog-identity.xml} | 2 +-
...n-enablessl-is-set.xml => 310-require-tls-when-enablessl-is-set.xml} | 2 +-
...09-syslog-identity-lifetime.xml => 310-syslog-identity-lifetime.xml} | 2 +-
...t-appender-send-timeout.xml => 310-telnet-appender-send-timeout.xml} | 2 +-
.../{309-telnet-listen-address.xml => 310-telnet-listen-address.xml} | 2 +-
...e-honours-the-fix-gate.xml => 310-username-honours-the-fix-gate.xml} | 2 +-
...ify-release-fails-closed.xml => 310-verify-release-fails-closed.xml} | 2 +-
...layout-generated-sql.xml => 310-warn-about-layout-generated-sql.xml} | 2 +-
17 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/src/changelog/3.4.0/309-bound-file-lock-waits.xml
b/src/changelog/3.4.0/310-bound-file-lock-waits.xml
similarity index 93%
rename from src/changelog/3.4.0/309-bound-file-lock-waits.xml
rename to src/changelog/3.4.0/310-bound-file-lock-waits.xml
index fb80fad5..b7f86a8a 100644
--- a/src/changelog/3.4.0/309-bound-file-lock-waits.xml
+++ b/src/changelog/3.4.0/310-bound-file-lock-waits.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="changed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
bound the waits for the named mutexes used by
`FileAppender.InterProcessLock` and by
`RollingFileAppender` when it decides whether to roll. Both waited without a
timeout while the
diff --git a/src/changelog/3.4.0/309-bound-filter-regex-matching.xml
b/src/changelog/3.4.0/310-bound-filter-regex-matching.xml
similarity index 92%
rename from src/changelog/3.4.0/309-bound-filter-regex-matching.xml
rename to src/changelog/3.4.0/310-bound-filter-regex-matching.xml
index 5b721997..4650f78a 100644
--- a/src/changelog/3.4.0/309-bound-filter-regex-matching.xml
+++ b/src/changelog/3.4.0/310-bound-filter-regex-matching.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="changed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
give `RegexToMatch` matching a deadline in `StringMatchFilter` and the
filters deriving from it,
`PropertyFilter`, `MdcFilter` and `NdcFilter`. The pattern was matched with
diff --git a/src/changelog/3.4.0/309-contain-per-event-adonet-failures.xml
b/src/changelog/3.4.0/310-contain-per-event-adonet-failures.xml
similarity index 91%
rename from src/changelog/3.4.0/309-contain-per-event-adonet-failures.xml
rename to src/changelog/3.4.0/310-contain-per-event-adonet-failures.xml
index 6cef7661..ec7f3e5b 100644
--- a/src/changelog/3.4.0/309-contain-per-event-adonet-failures.xml
+++ b/src/changelog/3.4.0/310-contain-per-event-adonet-failures.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
stop a single logging event that the database rejects from discarding the
whole buffer in
`AdoNetAppender`. The events have already been removed from the buffer when
they are sent, so a
diff --git a/src/changelog/3.4.0/309-escape-nul-in-local-syslog-messages.xml
b/src/changelog/3.4.0/310-escape-nul-in-local-syslog-messages.xml
similarity index 91%
rename from src/changelog/3.4.0/309-escape-nul-in-local-syslog-messages.xml
rename to src/changelog/3.4.0/310-escape-nul-in-local-syslog-messages.xml
index 1ab3b993..17a347ad 100644
--- a/src/changelog/3.4.0/309-escape-nul-in-local-syslog-messages.xml
+++ b/src/changelog/3.4.0/310-escape-nul-in-local-syslog-messages.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
stop a NUL character in logged content from truncating
`LocalSyslogAppender` records. The
message is marshaled to libc as a null-terminated string, so everything the
layout rendered after
diff --git a/src/changelog/3.4.0/309-flush-uses-the-appender-lock.xml
b/src/changelog/3.4.0/310-flush-uses-the-appender-lock.xml
similarity index 92%
rename from src/changelog/3.4.0/309-flush-uses-the-appender-lock.xml
rename to src/changelog/3.4.0/310-flush-uses-the-appender-lock.xml
index 90565811..606d21ca 100644
--- a/src/changelog/3.4.0/309-flush-uses-the-appender-lock.xml
+++ b/src/changelog/3.4.0/310-flush-uses-the-appender-lock.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
make `TextWriterAppender` and the appenders deriving from it, including
`FileAppender` and
`RollingFileAppender`, flush under the appender lock. `Flush` synchronized on
a private object while
diff --git a/src/changelog/3.4.0/309-pin-maven-wrapper-checksums.xml
b/src/changelog/3.4.0/310-pin-maven-wrapper-checksums.xml
similarity index 90%
rename from src/changelog/3.4.0/309-pin-maven-wrapper-checksums.xml
rename to src/changelog/3.4.0/310-pin-maven-wrapper-checksums.xml
index b4ce40cb..4a4b9bdd 100644
--- a/src/changelog/3.4.0/309-pin-maven-wrapper-checksums.xml
+++ b/src/changelog/3.4.0/310-pin-maven-wrapper-checksums.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="added">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
pin the Maven wrapper and the Maven distribution it downloads with
`wrapperSha256Sum` and `distributionSha256Sum`. `mvnw` and
`MavenWrapperDownloader` already refuse
diff --git
a/src/changelog/3.4.0/309-redact-password-in-connection-string-errors.xml
b/src/changelog/3.4.0/310-redact-password-in-connection-string-errors.xml
similarity index 90%
rename from
src/changelog/3.4.0/309-redact-password-in-connection-string-errors.xml
rename to
src/changelog/3.4.0/310-redact-password-in-connection-string-errors.xml
index bcc07ebb..5bbe81e3 100644
--- a/src/changelog/3.4.0/309-redact-password-in-connection-string-errors.xml
+++ b/src/changelog/3.4.0/310-redact-password-in-connection-string-errors.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
stop `AdoNetAppender` from repeating the password when it reports a
connection it could not
open. The message named the resolved connection string in full, and the
documented examples embed
diff --git a/src/changelog/3.4.0/309-remove-git-broadcast-workflow.xml
b/src/changelog/3.4.0/310-remove-git-broadcast-workflow.xml
similarity index 90%
rename from src/changelog/3.4.0/309-remove-git-broadcast-workflow.xml
rename to src/changelog/3.4.0/310-remove-git-broadcast-workflow.xml
index 1b7b5265..24e801b3 100644
--- a/src/changelog/3.4.0/309-remove-git-broadcast-workflow.xml
+++ b/src/changelog/3.4.0/310-remove-git-broadcast-workflow.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="removed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
remove the `git-broadcast` workflow. Its push and pull request triggers
had been commented out,
leaving it dispatched by hand only, while it still ran `npx
git-broadcast@beta`, a dist-tag that can
diff --git a/src/changelog/3.4.0/309-report-first-appender-error-by-default.xml
b/src/changelog/3.4.0/310-report-first-appender-error-by-default.xml
similarity index 90%
rename from src/changelog/3.4.0/309-report-first-appender-error-by-default.xml
rename to src/changelog/3.4.0/310-report-first-appender-error-by-default.xml
index 6d372d61..d480e107 100644
--- a/src/changelog/3.4.0/309-report-first-appender-error-by-default.xml
+++ b/src/changelog/3.4.0/310-report-first-appender-error-by-default.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="changed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
report the first error of an appender even when `log4net.Internal.Debug`
is off, which is the
default. `OnlyOnceErrorHandler` is the default error handler of every
appender, so an appender
diff --git a/src/changelog/3.4.0/309-report-malformed-syslog-identity.xml
b/src/changelog/3.4.0/310-report-malformed-syslog-identity.xml
similarity index 92%
rename from src/changelog/3.4.0/309-report-malformed-syslog-identity.xml
rename to src/changelog/3.4.0/310-report-malformed-syslog-identity.xml
index 6c57d4f6..c731d66c 100644
--- a/src/changelog/3.4.0/309-report-malformed-syslog-identity.xml
+++ b/src/changelog/3.4.0/310-report-malformed-syslog-identity.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
report a `RemoteSyslogAppender` `Identity` that renders control
characters, and remove them, so
that it cannot split the record. The identity becomes the TAG of the syslog
record and was appended
diff --git a/src/changelog/3.4.0/309-require-tls-when-enablessl-is-set.xml
b/src/changelog/3.4.0/310-require-tls-when-enablessl-is-set.xml
similarity index 91%
rename from src/changelog/3.4.0/309-require-tls-when-enablessl-is-set.xml
rename to src/changelog/3.4.0/310-require-tls-when-enablessl-is-set.xml
index 0e279930..9e1dbc47 100644
--- a/src/changelog/3.4.0/309-require-tls-when-enablessl-is-set.xml
+++ b/src/changelog/3.4.0/310-require-tls-when-enablessl-is-set.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="added">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
add a `TransportSecurity` option to the `log4net.Ext.Mail` `SmtpAppender`
and make `EnableSsl`
a shorthand for it. `EnableSsl` requires transport security, selecting
implicit TLS on port 465 and
diff --git a/src/changelog/3.4.0/309-syslog-identity-lifetime.xml
b/src/changelog/3.4.0/310-syslog-identity-lifetime.xml
similarity index 91%
rename from src/changelog/3.4.0/309-syslog-identity-lifetime.xml
rename to src/changelog/3.4.0/310-syslog-identity-lifetime.xml
index 707f323c..da038255 100644
--- a/src/changelog/3.4.0/309-syslog-identity-lifetime.xml
+++ b/src/changelog/3.4.0/310-syslog-identity-lifetime.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
fix the lifetime of the `LocalSyslogAppender` identity. `openlog` keeps
the pointer it is given
rather than a copy of the string, and registers it for the process rather
than for an appender.
diff --git a/src/changelog/3.4.0/309-telnet-appender-send-timeout.xml
b/src/changelog/3.4.0/310-telnet-appender-send-timeout.xml
similarity index 91%
rename from src/changelog/3.4.0/309-telnet-appender-send-timeout.xml
rename to src/changelog/3.4.0/310-telnet-appender-send-timeout.xml
index e5813cc7..0ab86e34 100644
--- a/src/changelog/3.4.0/309-telnet-appender-send-timeout.xml
+++ b/src/changelog/3.4.0/310-telnet-appender-send-timeout.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
stop a Telnet client that connects and then stops reading from suspending
all logging.
`TelnetAppender` writes to its clients while the appender lock is held and
set no
diff --git a/src/changelog/3.4.0/309-telnet-listen-address.xml
b/src/changelog/3.4.0/310-telnet-listen-address.xml
similarity index 90%
rename from src/changelog/3.4.0/309-telnet-listen-address.xml
rename to src/changelog/3.4.0/310-telnet-listen-address.xml
index 05853417..0d189da9 100644
--- a/src/changelog/3.4.0/309-telnet-listen-address.xml
+++ b/src/changelog/3.4.0/310-telnet-listen-address.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="added">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
add `ListenAddress` to `TelnetAppender`. The listening socket was bound to
`IPAddress.Any` with
no way to scope it, so an operator who only wanted to watch the log from the
machine itself still
diff --git a/src/changelog/3.4.0/309-username-honours-the-fix-gate.xml
b/src/changelog/3.4.0/310-username-honours-the-fix-gate.xml
similarity index 92%
rename from src/changelog/3.4.0/309-username-honours-the-fix-gate.xml
rename to src/changelog/3.4.0/310-username-honours-the-fix-gate.xml
index ceffb9e1..7d115b22 100644
--- a/src/changelog/3.4.0/309-username-honours-the-fix-gate.xml
+++ b/src/changelog/3.4.0/310-username-honours-the-fix-gate.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
stop `LoggingEvent.UserName` reporting the wrong user for an event logged
while impersonating.
The property resolved the identity of whichever thread read it, so with a
buffering appender the
diff --git a/src/changelog/3.4.0/309-verify-release-fails-closed.xml
b/src/changelog/3.4.0/310-verify-release-fails-closed.xml
similarity index 92%
rename from src/changelog/3.4.0/309-verify-release-fails-closed.xml
rename to src/changelog/3.4.0/310-verify-release-fails-closed.xml
index 8f6f02a0..ba4a1e0e 100644
--- a/src/changelog/3.4.0/309-verify-release-fails-closed.xml
+++ b/src/changelog/3.4.0/310-verify-release-fails-closed.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="fixed">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
make the release verification scripts fail closed. `verify-release.ps1`
reported a SHA-512
mismatch with `-ErrorAction Continue` and never checked the exit code of
`gpg`, so it extracted the
diff --git a/src/changelog/3.4.0/309-warn-about-layout-generated-sql.xml
b/src/changelog/3.4.0/310-warn-about-layout-generated-sql.xml
similarity index 89%
rename from src/changelog/3.4.0/309-warn-about-layout-generated-sql.xml
rename to src/changelog/3.4.0/310-warn-about-layout-generated-sql.xml
index a2010af2..0a735596 100644
--- a/src/changelog/3.4.0/309-warn-about-layout-generated-sql.xml
+++ b/src/changelog/3.4.0/310-warn-about-layout-generated-sql.xml
@@ -3,7 +3,7 @@
xmlns="https://logging.apache.org/xml/ns";
xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
type="added">
- <issue id="309" link="https://github.com/apache/logging-log4net/pull/309"/>
+ <issue id="310" link="https://github.com/apache/logging-log4net/pull/310"/>
<description format="asciidoc">
log an error when `AdoNetAppender` is activated without `CommandText`. In
that legacy mode the
rendered `Layout` output is executed as the SQL statement, and because
layouts perform no SQL
