+1 Remko On Tue, Dec 21, 2021 at 12:52 PM Carter Kozak <cko...@ckozak.net> wrote:
> +1 > > -ck > > > On Dec 20, 2021, at 22:46, Matt Sicker <boa...@gmail.com> wrote: > > > > +1 > > > > Notes on the release: > > * Sigs and checksums good > > * Builds and tests fine > > * Outdated copyright year in NOTICE.txt > > > > -- > > Matt Sicker > > > >> On Dec 20, 2021, at 18:52, Ralph Goers <ralph.go...@dslextreme.com> > wrote: > >> > >> This is a vote to release Log4j 2.12.3, a security release for Java 7 > users. > >> > >> Please download, test, and cast your votes on the log4j developers list. > >> [] +1, release the artifacts > >> [] -1, don't release because... > >> > >> The vote will remain open for as short amount as time as required to > vet the release. All votes are welcome and we encourage everyone to test > the release, but only Logging PMC votes are “officially” counted. As > always, at least 3 +1 votes and more positive than negative votes are > required. > >> > >> Changes in this version include: > >> > >> Fixed Bugs > >> > >> • LOG4J2-3230: Fix string substitution recursion. > >> • LOG4J2-3242: Limit JNDI to the java protocol only. JNDI will > remain disabled by default. Rename JNDI enablement property from > 'log4j2.enableJndi' to 'log4j2.enableJndiLookup', 'log4j2.enableJndiJms', > and 'log4j2.enableJndiContextSelector’. > >> • LOG4J2-2819: Add support for specifying an SSL configuration > for SmtpAppender > >> > >> Tag: > >> a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git"; and then "git checkout > tags/log4j-2.12.3-rc1” or just "git clone -b log4j-2.12.3-rc1 > https://github.com/apache/logging-log4j2.git"; > >> b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.3-rc1” > >> > >> Web Site: > https://logging.staged.apache.org/log4j/log4j-2.12.3/index.html > >> > >> Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1074 > >> > >> Distribution archives: > https://dist.apache.org/repos/dist/dev/logging/log4j/ > >> > >> You may download all the Maven artifacts by executing: > >> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1074/org/apache/logging/log4j/ > . > > > >
