+1 -ck
> On Dec 20, 2021, at 22:46, Matt Sicker <[email protected]> wrote: > > +1 > > Notes on the release: > * Sigs and checksums good > * Builds and tests fine > * Outdated copyright year in NOTICE.txt > > -- > Matt Sicker > >> On Dec 20, 2021, at 18:52, Ralph Goers <[email protected]> wrote: >> >> This is a vote to release Log4j 2.12.3, a security release for Java 7 users. >> >> Please download, test, and cast your votes on the log4j developers list. >> [] +1, release the artifacts >> [] -1, don't release because... >> >> The vote will remain open for as short amount as time as required to vet the >> release. All votes are welcome and we encourage everyone to test the >> release, but only Logging PMC votes are “officially” counted. As always, at >> least 3 +1 votes and more positive than negative votes are required. >> >> Changes in this version include: >> >> Fixed Bugs >> >> • LOG4J2-3230: Fix string substitution recursion. >> • LOG4J2-3242: Limit JNDI to the java protocol only. JNDI will remain >> disabled by default. Rename JNDI enablement property from >> 'log4j2.enableJndi' to 'log4j2.enableJndiLookup', 'log4j2.enableJndiJms', >> and 'log4j2.enableJndiContextSelector’. >> • LOG4J2-2819: Add support for specifying an SSL configuration for >> SmtpAppender >> >> Tag: >> a) for a new copy do "git clone >> https://github.com/apache/logging-log4j2.git"; and then "git checkout >> tags/log4j-2.12.3-rc1” or just "git clone -b log4j-2.12.3-rc1 >> https://github.com/apache/logging-log4j2.git"; >> b) for an existing working copy to “git pull” and then “git checkout >> tags/log4j-2.12.3-rc1” >> >> Web Site: https://logging.staged.apache.org/log4j/log4j-2.12.3/index.html >> >> Maven Artifacts: >> https://repository.apache.org/content/repositories/orgapachelogging-1074 >> >> Distribution archives: https://dist.apache.org/repos/dist/dev/logging/log4j/ >> >> You may download all the Maven artifacts by executing: >> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate >> https://repository.apache.org/content/repositories/orgapachelogging-1074/org/apache/logging/log4j/. >
