[RESULT][VOTE] Release Log4j 2.12.2-rc1
This vote passed with +1 votes from Matt Sicker, Carter Kozak, Remko Popma, Ralph Goers, and Gary Gregory. There were no other votes. I will continue with the release. Ralph
Re: [VOTE] Release Log4j 2.12.2-rc1
+1 Minor hassle with log4j-Cassandra discussed elsewhere. Gary On Tue, Dec 14, 2021, 13:28 Ralph Goers wrote: > My +1 > > Ralph > > > On Dec 14, 2021, at 11:26 AM, Remko Popma wrote: > > > > +1 very light validation but ran a simple test program against the > binaries > > > > On Wed, Dec 15, 2021 at 3:19 AM Carter Kozak wrote: > > > >> +1 > >> > >> validated the build and signatures, tests in core modules. > >> > >> On Tue, Dec 14, 2021, at 00:58, Ralph Goers wrote: > >>> This is a vote to release Log4j 2.12.2, a security release for Java 7 > >> users. > >>> > >>> Please download, test, and cast your votes on the log4j developers > list. > >>> [] +1, release the artifacts > >>> [] -1, don't release because... > >>> > >>> The vote will remain open for as short amount as time as required to > vet > >> the release. All votes are welcome and we encourage everyone to test the > >> release, but only Logging PMC votes are “officially” counted. As > always, at > >> least 3 +1 votes and more positive than negative votes are required. > >>> > >>> Changes in this version include: > >>> > >>> Fixed Bugs > >>> > >>> • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove > >> message lookups. When enabled JNDI only supports the java protocol. > >>> > >>> Tag: > >>> a) for a new copy do "git clone > >> https://github.com/apache/logging-log4j2.git"; and then "git checkout > >> tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 > >> https://github.com/apache/logging-log4j2.git"; > >>> b) for an existing working copy to “git pull” and then “git checkout > >> tags/log4j-2.12.2-rc1” > >>> > >>> Web Site: No web site was generated for this release. The 2.16.0 web > >> site will be updated appropriately. > >>> > >>> Maven Artifacts: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1070 > >>> > >>> Distribution archives: > >> https://dist.apache.org/repos/dist/dev/logging/log4j/ > >>> > >>> You may download all the Maven artifacts by executing: > >>> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > >> > https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/ > >> > >> -ck > >
Re: [VOTE] Release Log4j 2.12.2-rc1
My +1 Ralph > On Dec 14, 2021, at 11:26 AM, Remko Popma wrote: > > +1 very light validation but ran a simple test program against the binaries > > On Wed, Dec 15, 2021 at 3:19 AM Carter Kozak wrote: > >> +1 >> >> validated the build and signatures, tests in core modules. >> >> On Tue, Dec 14, 2021, at 00:58, Ralph Goers wrote: >>> This is a vote to release Log4j 2.12.2, a security release for Java 7 >> users. >>> >>> Please download, test, and cast your votes on the log4j developers list. >>> [] +1, release the artifacts >>> [] -1, don't release because... >>> >>> The vote will remain open for as short amount as time as required to vet >> the release. All votes are welcome and we encourage everyone to test the >> release, but only Logging PMC votes are “officially” counted. As always, at >> least 3 +1 votes and more positive than negative votes are required. >>> >>> Changes in this version include: >>> >>> Fixed Bugs >>> >>> • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove >> message lookups. When enabled JNDI only supports the java protocol. >>> >>> Tag: >>> a) for a new copy do "git clone >> https://github.com/apache/logging-log4j2.git"; and then "git checkout >> tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 >> https://github.com/apache/logging-log4j2.git"; >>> b) for an existing working copy to “git pull” and then “git checkout >> tags/log4j-2.12.2-rc1” >>> >>> Web Site: No web site was generated for this release. The 2.16.0 web >> site will be updated appropriately. >>> >>> Maven Artifacts: >> https://repository.apache.org/content/repositories/orgapachelogging-1070 >>> >>> Distribution archives: >> https://dist.apache.org/repos/dist/dev/logging/log4j/ >>> >>> You may download all the Maven artifacts by executing: >>> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate >> https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/ >> >> -ck
Re: [VOTE] Release Log4j 2.12.2-rc1
+1 very light validation but ran a simple test program against the binaries On Wed, Dec 15, 2021 at 3:19 AM Carter Kozak wrote: > +1 > > validated the build and signatures, tests in core modules. > > On Tue, Dec 14, 2021, at 00:58, Ralph Goers wrote: > > This is a vote to release Log4j 2.12.2, a security release for Java 7 > users. > > > > Please download, test, and cast your votes on the log4j developers list. > > [] +1, release the artifacts > > [] -1, don't release because... > > > > The vote will remain open for as short amount as time as required to vet > the release. All votes are welcome and we encourage everyone to test the > release, but only Logging PMC votes are “officially” counted. As always, at > least 3 +1 votes and more positive than negative votes are required. > > > > Changes in this version include: > > > > Fixed Bugs > > > > • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove > message lookups. When enabled JNDI only supports the java protocol. > > > > Tag: > > a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git"; and then "git checkout > tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 > https://github.com/apache/logging-log4j2.git"; > > b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.2-rc1” > > > > Web Site: No web site was generated for this release. The 2.16.0 web > site will be updated appropriately. > > > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1070 > > > > Distribution archives: > https://dist.apache.org/repos/dist/dev/logging/log4j/ > > > > You may download all the Maven artifacts by executing: > > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/ > > -ck
Re: [VOTE] Release Log4j 2.12.2-rc1
+1 validated the build and signatures, tests in core modules. On Tue, Dec 14, 2021, at 00:58, Ralph Goers wrote: > This is a vote to release Log4j 2.12.2, a security release for Java 7 users. > > Please download, test, and cast your votes on the log4j developers list. > [] +1, release the artifacts > [] -1, don't release because... > > The vote will remain open for as short amount as time as required to vet the > release. All votes are welcome and we encourage everyone to test the release, > but only Logging PMC votes are “officially” counted. As always, at least 3 +1 > votes and more positive than negative votes are required. > > Changes in this version include: > > Fixed Bugs > > • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove message > lookups. When enabled JNDI only supports the java protocol. > > Tag: > a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git"; and then "git checkout > tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 > https://github.com/apache/logging-log4j2.git"; > b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.2-rc1” > > Web Site: No web site was generated for this release. The 2.16.0 web site > will be updated appropriately. > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1070 > > Distribution archives: https://dist.apache.org/repos/dist/dev/logging/log4j/ > > You may download all the Maven artifacts by executing: > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/ -ck
Re: [VOTE] Release Log4j 2.12.2-rc1
FTR, here the crash, even after updating FailSafe to the current 3.0.0-M5: # # A fatal error has been detected by the Java Runtime Environment: # # SIGSEGV (0xb) at pc=0x00010805ec4c, pid=27510, tid=0x3d03 # # JRE version: OpenJDK Runtime Environment (8.0_312) (build 1.8.0_312-bre_2021_10_20_23_15-b00) # Java VM: OpenJDK 64-Bit Server VM (25.312-b00 mixed mode bsd-amd64 compressed oops) # Problematic frame: # V [libjvm.dylib+0x545c4c] # # Failed to write core dump. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again # # If you would like to submit a bug report, please visit: # https://github.com/Homebrew/homebrew-core/issues # --- T H R E A D --- Current thread (0x7fd6de26e000): JavaThread "Log4j2-TF-1-Cassandra-1" [_thread_in_vm, id=15619, stack(0x72f0f000,0x7300f000)] siginfo: si_signo: 11 (SIGSEGV), si_code: 1 (SEGV_MAPERR), si_addr: 0x Registers: RAX=0x0001081f4f90, RBX=0x7fd6de26e000, RCX=0x7fd6dfdf6015, RDX=0x RSP=0x7300d460, RBP=0x7300d490, RSI=0x0006, RDI=0x7300d468 R8 =0x0001081f3ed0, R9 =0x0001081f3ed0, R10=0x00010887b08c, R11=0x00010887b058 R12=0x, R13=0x7300d500, R14=0x7fd6dfdf6015, R15=0x RIP=0x00010805ec4c, EFLAGS=0x00010246, ERR=0x0004 TRAPNO=0x000e Top of Stack: (sp=0x7300d460) 0x7300d460: 63ef04e0 7fd6de26e000 0x7300d470: 7fd6de26e000 000119512dd0 0x7300d480: 7300d5b0 7fd6de26e000 0x7300d490: 7300d4e0 00010887b0fe 0x7300d4a0: 0007802f76c0 0x7300d4b0: 7300d4f0 00011ea9a138 0x7300d4c0: 7300d4e0 000107c3fea4 0x7300d4d0: 625fdb28 7fd6de26e000 0x7300d4e0: 7300d570 00010849c700 0x7300d4f0: 7fd6de26e000 00010849c700 0x7300d500: 7fd6dfdf6015 7300d5b0 0x7300d510: 0007802f76c0 0x7300d520: 0007af5be898 0x7300d530: 7300d530 00011c56073b 0x7300d540: 7300d5b0 00011c560fd8 0x7300d550: 00011c5607b0 0x7300d560: 7300d500 7300d588 0x7300d570: 7300d5f8 00010849cffd 0x7300d580: 0003 0x7300d590: 0007af5be898 0x7300d5a0: 7fd6dfdf6015 00010849c7d0 0x7300d5b0: 7300d5b8 0x7300d5c0: 00011c56060e 7300d630 0x7300d5d0: 00011c560fd8 0x7300d5e0: 00011c560678 7300d588 0x7300d5f0: 7300d608 7300d678 0x7300d600: 00010849cffd 0003 0x7300d610: 0007af5be868 0x7300d620: 7fd6dfdf6015 0007af5a87a0 0x7300d630: 7300d638 0x7300d640: 00011c5604ce 7300d6c8 0x7300d650: 00011c560fd8 Instructions: (pc=0x00010805ec4c) 0x00010805ec2c: 7f fe ff 31 db 48 8d 7d d8 48 89 1f be 06 00 00 0x00010805ec3c: 00 e8 5a 11 df ff 48 89 5d e0 41 f6 c7 01 75 05 0x00010805ec4c: 49 8b 07 eb 08 4c 89 ff e8 6d fc dd ff 42 0f be 0x00010805ec5c: 1c 30 48 8d 7d e0 e8 e9 e0 bd ff 48 8d 7d d8 be Register to memory mapping: RAX=0x0001081f4f90: _ZN20SafepointSynchronize6_stateE+0 in /usr /local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/lib/server/libjvm.dylib at 0x000107b19000 RBX=0x7fd6de26e000 is a thread RCX=0x7fd6dfdf6015 is an unknown value RDX=0x is an unknown value RSP=0x7300d460 is pointing into the stack for thread: 0x7fd6de26e000 RBP=0x7300d490 is pointing into the stack for thread: 0x7fd6de26e000 RSI=0x0006 is an unknown value RDI=0x7300d468 is pointing into the stack for thread: 0x7fd6de26e000 R8 =0x0001081f3ed0: _ZN2os16_processor_countE+0 in /usr/local/Cellar/ openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/lib/server/libjvm.dylib at 0x000107b19000 R9 =0x0001081f3ed0: _ZN2os16_processor_countE+0 in /usr/local/Cellar/ openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/lib/server/libjvm.dylib at 0x000107b19000 R10=0x00010887b08c is at entry_point+76 in (nmethod*)0x00010887aed0 R11=0x00010887b058 is at entry_point+24 in (nmethod*)0x00010887aed0 R12=0x is an unknown value R13=0x7300d500 is pointing into the stack for thread: 0x7fd6de26e000 R14=0x7fd6dfdf6015 is a
Re: [VOTE] Release Log4j 2.12.2-rc1
Fails all the time :-( from that point on using 'mvn clean install -V -rf log4j-cassandra', digging... On Tue, Dec 14, 2021 at 11:00 AM Gary Gregory wrote: > My local build got further but failed dramatically: > > [INFO] Apache Log4j Cassandra . FAILURE [ > 4.748 s] > ... > [INFO] > > [INFO] BUILD FAILURE > [INFO] > > [INFO] Total time: 16:32 min > [INFO] Finished at: 2021-12-14T10:51:28-05:00 > [INFO] > > [ERROR] Failed to execute goal > org.apache.maven.plugins:maven-failsafe-plugin:2.22.2:verify (default) on > project log4j-cassandra: There are test failures. > [ERROR] > [ERROR] Please refer to > /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/failsafe-reports > for the individual test results. > [ERROR] Please refer to dump files (if any exist) [date].dump, > [date]-jvmRun[N].dump and [date].dumpstream. > [ERROR] org.apache.maven.surefire.booter.SurefireBooterForkException: > ExecutionException The forked VM terminated without properly saying > goodbye. VM crash or System.exit called? > [ERROR] Command was /bin/sh -c cd > /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra && > /usr/local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/bin/java > -Xms256m -Xmx1024m -jar > /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire/surefirebooter96790289588861473.jar > /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire > 2021-12-14T10-35-49_975-jvmRun1 surefire8996434553780933957tmp > surefire_91212199057030638099tmp > [ERROR] Error occurred in starting fork, check output in log > [ERROR] Process Exit Code: 134 > [ERROR] at > org.apache.maven.plugin.surefire.booterclient.ForkStarter.awaitResultsDone(ForkStarter.java:510) > [ERROR] at > org.apache.maven.plugin.surefire.booterclient.ForkStarter.runSuitesForkPerTestSet(ForkStarter.java:457) > [ERROR] at > org.apache.maven.plugin.surefire.booterclient.ForkStarter.run(ForkStarter.java:298) > [ERROR] at > org.apache.maven.plugin.surefire.booterclient.ForkStarter.run(ForkStarter.java:246) > [ERROR] at > org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeProvider(AbstractSurefireMojo.java:1183) > [ERROR] at > org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeAfterPreconditionsChecked(AbstractSurefireMojo.java:1011) > [ERROR] at > org.apache.maven.plugin.surefire.AbstractSurefireMojo.execute(AbstractSurefireMojo.java:857) > [ERROR] at > org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:137) > [ERROR] at > org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:210) > [ERROR] at > org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:156) > [ERROR] at > org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:148) > [ERROR] at > org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:117) > [ERROR] at > org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:81) > [ERROR] at > org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:56) > [ERROR] at > org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:128) > [ERROR] at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:305) > [ERROR] at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:192) > [ERROR] at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:105) > [ERROR] at org.apache.maven.cli.MavenCli.execute(MavenCli.java:972) > [ERROR] at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:293) > [ERROR] at org.apache.maven.cli.MavenCli.main(MavenCli.java:196) > [ERROR] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > [ERROR] at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > [ERROR] at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > [ERROR] at java.lang.reflect.Method.invoke(Method.java:498) > [ERROR] at > org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:282) > [ERROR] at > org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:225) > [ERROR] at > org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:406) > [ERROR] at > org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:347) > [ERROR] Caused by: > org.apache.maven.surefire.booter.SurefireBooterForkException: The forked VM > terminated without properly saying goodbye. VM crash or System.exit called? > [ERROR] Command was /bin/sh -c cd > /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra && > /usr/local/Cellar/openjdk@8/1.8.0+312/libexec
Re: [VOTE] Release Log4j 2.12.2-rc1
My local build got further but failed dramatically: [INFO] Apache Log4j Cassandra . FAILURE [ 4.748 s] ... [INFO] [INFO] BUILD FAILURE [INFO] [INFO] Total time: 16:32 min [INFO] Finished at: 2021-12-14T10:51:28-05:00 [INFO] [ERROR] Failed to execute goal org.apache.maven.plugins:maven-failsafe-plugin:2.22.2:verify (default) on project log4j-cassandra: There are test failures. [ERROR] [ERROR] Please refer to /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/failsafe-reports for the individual test results. [ERROR] Please refer to dump files (if any exist) [date].dump, [date]-jvmRun[N].dump and [date].dumpstream. [ERROR] org.apache.maven.surefire.booter.SurefireBooterForkException: ExecutionException The forked VM terminated without properly saying goodbye. VM crash or System.exit called? [ERROR] Command was /bin/sh -c cd /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra && /usr/local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/bin/java -Xms256m -Xmx1024m -jar /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire/surefirebooter96790289588861473.jar /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire 2021-12-14T10-35-49_975-jvmRun1 surefire8996434553780933957tmp surefire_91212199057030638099tmp [ERROR] Error occurred in starting fork, check output in log [ERROR] Process Exit Code: 134 [ERROR] at org.apache.maven.plugin.surefire.booterclient.ForkStarter.awaitResultsDone(ForkStarter.java:510) [ERROR] at org.apache.maven.plugin.surefire.booterclient.ForkStarter.runSuitesForkPerTestSet(ForkStarter.java:457) [ERROR] at org.apache.maven.plugin.surefire.booterclient.ForkStarter.run(ForkStarter.java:298) [ERROR] at org.apache.maven.plugin.surefire.booterclient.ForkStarter.run(ForkStarter.java:246) [ERROR] at org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeProvider(AbstractSurefireMojo.java:1183) [ERROR] at org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeAfterPreconditionsChecked(AbstractSurefireMojo.java:1011) [ERROR] at org.apache.maven.plugin.surefire.AbstractSurefireMojo.execute(AbstractSurefireMojo.java:857) [ERROR] at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:137) [ERROR] at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:210) [ERROR] at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:156) [ERROR] at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:148) [ERROR] at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:117) [ERROR] at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:81) [ERROR] at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:56) [ERROR] at org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:128) [ERROR] at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:305) [ERROR] at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:192) [ERROR] at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:105) [ERROR] at org.apache.maven.cli.MavenCli.execute(MavenCli.java:972) [ERROR] at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:293) [ERROR] at org.apache.maven.cli.MavenCli.main(MavenCli.java:196) [ERROR] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [ERROR] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [ERROR] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [ERROR] at java.lang.reflect.Method.invoke(Method.java:498) [ERROR] at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:282) [ERROR] at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:225) [ERROR] at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:406) [ERROR] at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:347) [ERROR] Caused by: org.apache.maven.surefire.booter.SurefireBooterForkException: The forked VM terminated without properly saying goodbye. VM crash or System.exit called? [ERROR] Command was /bin/sh -c cd /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra && /usr/local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre/bin/java -Xms256m -Xmx1024m -jar /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire/surefirebooter96790289588861473.jar /Users/garydgregory/git/logging-log4j-2.12/log4j-cassandra/target/surefire 2021-12-14T10-35-49_975-jvmRun1 surefire8996434553780933957tmp surefire_91212199057030638099
Re: [VOTE] Release Log4j 2.12.2-rc1
On Tue, Dec 14, 2021 at 10:42 AM Ralph Goers
wrote:
> Great. But I still need to back port the security fix.
>
Sure, I just want it to build here as a sanity check (my sanity that is), I
know yours is good :-)
Gary
>
> Ralph
>
> > On Dec 14, 2021, at 8:36 AM, Gary Gregory
> wrote:
> >
> > This problem was a red herring for me, my ${java:runtime} string was
> > wrapping due to length and the test did not account for that. I updated
> the
> > branch and I am building locally to see if I can go through a whole
> build...
> >
> > Gary
> >
> > On Tue, Dec 14, 2021 at 6:06 AM Gary Gregory
> wrote:
> >
> >> After checking out the tag (git status says 'HEAD detached at
> >> log4j-2.12.2-rc1') and running 'mvn clean install' with Java 8 and Maven
> >> 3.8.4, I get:
> >> [INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
> >> 0.351 s - in org.apache.logging.log4j.MarkerMixInJsonTest
> >> [INFO]
> >> [INFO] Results:
> >> [INFO]
> >> [ERROR] Failures:
> >> [ERROR] YamlLayoutTest.testAdditionalFields:318 ---
> >> thread: "MyThreadName"
> >> level: "DEBUG"
> >> loggerName: "a.B"
> >> marker:
> >> name: "Marker1"
> >> parents:
> >> - name: "ParentMarker1"
> >>parents:
> >>- name: "GrandMotherMarker"
> >>- name: "GrandFatherMarker"
> >> - name: "ParentMarker2"
> >> message: "Msg"
> >> thrown:
> >> commonElementCount: 0
> >> localizedMessage: "testIOEx"
> >> message: "testIOEx"
> >> name: "java.io.IOException"
> >> cause:
> >>commonElementCount: 38
> >>localizedMessage: "testNPEx"
> >>message: "testNPEx"
> >>name: "java.lang.NullPointerException"
> >> suppressed:
> >> - commonElementCount: 0
> >>localizedMessage: "I am suppressed exception 1"
> >>message: "I am suppressed exception 1"
> >>name: "java.lang.IndexOutOfBoundsException"
> >> - commonElementCount: 0
> >>localizedMessage: "I am suppressed exception 2"
> >>message: "I am suppressed exception 2"
> >>name: "java.lang.IndexOutOfBoundsException"
> >> contextStack:
> >> - "stack_msg1"
> >> - "stack_msg2"
> >> endOfBatch: false
> >> loggerFqcn: "f.q.c.n"
> >> instant:
> >> epochSecond: 0
> >> nanoOfSecond: 100
> >> threadId: 1
> >> threadPriority: 5
> >> KEY1: "VALUE1"
> >> KEY2: "OpenJDK Runtime Environment (build
> >> 1.8.0_312-bre_2021_10_20_23_15-b00) from\
> >> \ Homebrew"
> >>
> >> [INFO]
> >> [ERROR] Tests run: 2063, Failures: 1, Errors: 0, Skipped: 21
> >>
> >> Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
> >> Maven home: /usr/local/Cellar/maven/3.8.4/libexec
> >> Java version: 1.8.0_312, vendor: Homebrew, runtime:
> >> /usr/local/Cellar/openjdk@8
> >> /1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre
> >> Default locale: en_US, platform encoding: UTF-8
> >> OS name: "mac os x", version: "12.0.1", arch: "x86_64", family: "mac"
> >>
> >> I can reproduce this from Eclipse by running the one test class.
> >>
> >> The test uses a Java lookup here:
> >>
> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L312
> >>
> >> And expects it to be present here:
> >>
> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L318
> >>
> >> (1) Should this test pass or fail? I thought we disabled lookups
> _except_
> >> in configuration files.
> >> (2) If the test should pass, is _my_ failure due to some line length or
> >> line wrapping issue?
> >>
> >> TY and congrats to all of us for spending so much time on this,
> >> Gary
> >>
> >>
> >> On Tue, Dec 14, 2021 at 12:58 AM Ralph Goers <
> ralph.go...@dslextreme.com>
> >> wrote:
> >>
> >>> This is a vote to release Log4j 2.12.2, a security release for Java 7
> >>> users.
> >>>
> >>> Please download, test, and cast your votes on the log4j developers
> list.
> >>> [] +1, release the artifacts
> >>> [] -1, don't release because...
> >>>
> >>> The vote will remain open for as short amount as time as required to
> vet
> >>> the release. All votes are welcome and we encourage everyone to test
> the
> >>> release, but only Logging PMC votes are “officially” counted. As
> always, at
> >>> least 3 +1 votes and more positive than negative votes are required.
> >>>
> >>> Changes in this version include:
> >>>
> >>> Fixed Bugs
> >>>
> >>>• LOG4J-3220: Disable JNDI by default, remove JNDI Lookup,
> remove
> >>> message lookups. When enabled JNDI only supports the java protocol.
> >>>
> >>> Tag:
> >>> a) for a new copy do "git clone
> >>> https://github.com/apache/logging-log4j2.git"; and then "git checkout
> >>> tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1
> >>> https://github.com/apache/logging-log4j2.git";
> >>> b) for an existing working copy to “git pull” and then “git checkout
> >>> tags/log4j-2.12.2-rc1”
> >>>
> >>> Web Site: No web site was generated for this rele
Re: [VOTE] Release Log4j 2.12.2-rc1
Great. But I still need to back port the security fix.
Ralph
> On Dec 14, 2021, at 8:36 AM, Gary Gregory wrote:
>
> This problem was a red herring for me, my ${java:runtime} string was
> wrapping due to length and the test did not account for that. I updated the
> branch and I am building locally to see if I can go through a whole build...
>
> Gary
>
> On Tue, Dec 14, 2021 at 6:06 AM Gary Gregory wrote:
>
>> After checking out the tag (git status says 'HEAD detached at
>> log4j-2.12.2-rc1') and running 'mvn clean install' with Java 8 and Maven
>> 3.8.4, I get:
>> [INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
>> 0.351 s - in org.apache.logging.log4j.MarkerMixInJsonTest
>> [INFO]
>> [INFO] Results:
>> [INFO]
>> [ERROR] Failures:
>> [ERROR] YamlLayoutTest.testAdditionalFields:318 ---
>> thread: "MyThreadName"
>> level: "DEBUG"
>> loggerName: "a.B"
>> marker:
>> name: "Marker1"
>> parents:
>> - name: "ParentMarker1"
>>parents:
>>- name: "GrandMotherMarker"
>>- name: "GrandFatherMarker"
>> - name: "ParentMarker2"
>> message: "Msg"
>> thrown:
>> commonElementCount: 0
>> localizedMessage: "testIOEx"
>> message: "testIOEx"
>> name: "java.io.IOException"
>> cause:
>>commonElementCount: 38
>>localizedMessage: "testNPEx"
>>message: "testNPEx"
>>name: "java.lang.NullPointerException"
>> suppressed:
>> - commonElementCount: 0
>>localizedMessage: "I am suppressed exception 1"
>>message: "I am suppressed exception 1"
>>name: "java.lang.IndexOutOfBoundsException"
>> - commonElementCount: 0
>>localizedMessage: "I am suppressed exception 2"
>>message: "I am suppressed exception 2"
>>name: "java.lang.IndexOutOfBoundsException"
>> contextStack:
>> - "stack_msg1"
>> - "stack_msg2"
>> endOfBatch: false
>> loggerFqcn: "f.q.c.n"
>> instant:
>> epochSecond: 0
>> nanoOfSecond: 100
>> threadId: 1
>> threadPriority: 5
>> KEY1: "VALUE1"
>> KEY2: "OpenJDK Runtime Environment (build
>> 1.8.0_312-bre_2021_10_20_23_15-b00) from\
>> \ Homebrew"
>>
>> [INFO]
>> [ERROR] Tests run: 2063, Failures: 1, Errors: 0, Skipped: 21
>>
>> Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
>> Maven home: /usr/local/Cellar/maven/3.8.4/libexec
>> Java version: 1.8.0_312, vendor: Homebrew, runtime:
>> /usr/local/Cellar/openjdk@8
>> /1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre
>> Default locale: en_US, platform encoding: UTF-8
>> OS name: "mac os x", version: "12.0.1", arch: "x86_64", family: "mac"
>>
>> I can reproduce this from Eclipse by running the one test class.
>>
>> The test uses a Java lookup here:
>> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L312
>>
>> And expects it to be present here:
>> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L318
>>
>> (1) Should this test pass or fail? I thought we disabled lookups _except_
>> in configuration files.
>> (2) If the test should pass, is _my_ failure due to some line length or
>> line wrapping issue?
>>
>> TY and congrats to all of us for spending so much time on this,
>> Gary
>>
>>
>> On Tue, Dec 14, 2021 at 12:58 AM Ralph Goers
>> wrote:
>>
>>> This is a vote to release Log4j 2.12.2, a security release for Java 7
>>> users.
>>>
>>> Please download, test, and cast your votes on the log4j developers list.
>>> [] +1, release the artifacts
>>> [] -1, don't release because...
>>>
>>> The vote will remain open for as short amount as time as required to vet
>>> the release. All votes are welcome and we encourage everyone to test the
>>> release, but only Logging PMC votes are “officially” counted. As always, at
>>> least 3 +1 votes and more positive than negative votes are required.
>>>
>>> Changes in this version include:
>>>
>>> Fixed Bugs
>>>
>>>• LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove
>>> message lookups. When enabled JNDI only supports the java protocol.
>>>
>>> Tag:
>>> a) for a new copy do "git clone
>>> https://github.com/apache/logging-log4j2.git"; and then "git checkout
>>> tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1
>>> https://github.com/apache/logging-log4j2.git";
>>> b) for an existing working copy to “git pull” and then “git checkout
>>> tags/log4j-2.12.2-rc1”
>>>
>>> Web Site: No web site was generated for this release. The 2.16.0 web
>>> site will be updated appropriately.
>>>
>>> Maven Artifacts:
>>> https://repository.apache.org/content/repositories/orgapachelogging-1070
>>>
>>> Distribution archives:
>>> https://dist.apache.org/repos/dist/dev/logging/log4j/
>>>
>>> You may download all the Maven artifacts by executing:
>>> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate
>>> https://repository.apache.org/content/repositories/orgapache
Re: [VOTE] Release Log4j 2.12.2-rc1
This problem was a red herring for me, my ${java:runtime} string was
wrapping due to length and the test did not account for that. I updated the
branch and I am building locally to see if I can go through a whole build...
Gary
On Tue, Dec 14, 2021 at 6:06 AM Gary Gregory wrote:
> After checking out the tag (git status says 'HEAD detached at
> log4j-2.12.2-rc1') and running 'mvn clean install' with Java 8 and Maven
> 3.8.4, I get:
> [INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
> 0.351 s - in org.apache.logging.log4j.MarkerMixInJsonTest
> [INFO]
> [INFO] Results:
> [INFO]
> [ERROR] Failures:
> [ERROR] YamlLayoutTest.testAdditionalFields:318 ---
> thread: "MyThreadName"
> level: "DEBUG"
> loggerName: "a.B"
> marker:
> name: "Marker1"
> parents:
> - name: "ParentMarker1"
> parents:
> - name: "GrandMotherMarker"
> - name: "GrandFatherMarker"
> - name: "ParentMarker2"
> message: "Msg"
> thrown:
> commonElementCount: 0
> localizedMessage: "testIOEx"
> message: "testIOEx"
> name: "java.io.IOException"
> cause:
> commonElementCount: 38
> localizedMessage: "testNPEx"
> message: "testNPEx"
> name: "java.lang.NullPointerException"
> suppressed:
> - commonElementCount: 0
> localizedMessage: "I am suppressed exception 1"
> message: "I am suppressed exception 1"
> name: "java.lang.IndexOutOfBoundsException"
> - commonElementCount: 0
> localizedMessage: "I am suppressed exception 2"
> message: "I am suppressed exception 2"
> name: "java.lang.IndexOutOfBoundsException"
> contextStack:
> - "stack_msg1"
> - "stack_msg2"
> endOfBatch: false
> loggerFqcn: "f.q.c.n"
> instant:
> epochSecond: 0
> nanoOfSecond: 100
> threadId: 1
> threadPriority: 5
> KEY1: "VALUE1"
> KEY2: "OpenJDK Runtime Environment (build
> 1.8.0_312-bre_2021_10_20_23_15-b00) from\
> \ Homebrew"
>
> [INFO]
> [ERROR] Tests run: 2063, Failures: 1, Errors: 0, Skipped: 21
>
> Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
> Maven home: /usr/local/Cellar/maven/3.8.4/libexec
> Java version: 1.8.0_312, vendor: Homebrew, runtime:
> /usr/local/Cellar/openjdk@8
> /1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "12.0.1", arch: "x86_64", family: "mac"
>
> I can reproduce this from Eclipse by running the one test class.
>
> The test uses a Java lookup here:
> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L312
>
> And expects it to be present here:
> https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L318
>
> (1) Should this test pass or fail? I thought we disabled lookups _except_
> in configuration files.
> (2) If the test should pass, is _my_ failure due to some line length or
> line wrapping issue?
>
> TY and congrats to all of us for spending so much time on this,
> Gary
>
>
> On Tue, Dec 14, 2021 at 12:58 AM Ralph Goers
> wrote:
>
>> This is a vote to release Log4j 2.12.2, a security release for Java 7
>> users.
>>
>> Please download, test, and cast your votes on the log4j developers list.
>> [] +1, release the artifacts
>> [] -1, don't release because...
>>
>> The vote will remain open for as short amount as time as required to vet
>> the release. All votes are welcome and we encourage everyone to test the
>> release, but only Logging PMC votes are “officially” counted. As always, at
>> least 3 +1 votes and more positive than negative votes are required.
>>
>> Changes in this version include:
>>
>> Fixed Bugs
>>
>> • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove
>> message lookups. When enabled JNDI only supports the java protocol.
>>
>> Tag:
>> a) for a new copy do "git clone
>> https://github.com/apache/logging-log4j2.git"; and then "git checkout
>> tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1
>> https://github.com/apache/logging-log4j2.git";
>> b) for an existing working copy to “git pull” and then “git checkout
>> tags/log4j-2.12.2-rc1”
>>
>> Web Site: No web site was generated for this release. The 2.16.0 web
>> site will be updated appropriately.
>>
>> Maven Artifacts:
>> https://repository.apache.org/content/repositories/orgapachelogging-1070
>>
>> Distribution archives:
>> https://dist.apache.org/repos/dist/dev/logging/log4j/
>>
>> You may download all the Maven artifacts by executing:
>> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate
>> https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/
>
>
Re: [VOTE] Release Log4j 2.12.2-rc1
Sorry, I can't get `log4j-2.12.2-rc1` tag compiling. Downloading: https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-remote-resources-plugin/1.5/maven-remote-resources-plugin-1.5.pom [INFO] [INFO] Reactor Summary: [INFO] [INFO] Apache Log4j 2 . SUCCESS [ 0.681 s] [INFO] Apache Log4j API Java 9 support SUCCESS [ 2.384 s] ... [INFO] Apache Log4j Samples: Configuration SUCCESS [ 0.989 s] [INFO] Apache Log4j Samples: LoggerProperties . SUCCESS [ 0.982 s] [INFO] Apache Log4j BOM ... FAILURE [ 0.223 s] [INFO] Apache Log4j JDBC DBCP 2 ... SKIPPED [INFO] Apache Log4j JPA ... SKIPPED [INFO] Apache Log4j CouchDB ... SKIPPED ... [ERROR] Plugin org.apache.maven.plugins:maven-remote-resources-plugin:1.5 or one of its dependencies could not be resolved: Failed to read artifact descriptor for org.apache.maven.plugins:maven-remote-resources-plugin:jar:1.5: Could not transfer artifact org.apache.maven.plugins:maven-remote-resources-plugin:pom:1.5 from/to central (https://repo.maven.apache.org/maven2): Received fatal alert: protocol_version -> [Help 1] I think I will be offline from now on to get some sleep. Good luck! On Tue, Dec 14, 2021 at 12:06 PM Gary Gregory wrote: > After checking out the tag (git status says 'HEAD detached at > log4j-2.12.2-rc1') and running 'mvn clean install' with Java 8 and Maven > 3.8.4, I get: > [INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: > 0.351 s - in org.apache.logging.log4j.MarkerMixInJsonTest > [INFO] > [INFO] Results: > [INFO] > [ERROR] Failures: > [ERROR] YamlLayoutTest.testAdditionalFields:318 --- > thread: "MyThreadName" > level: "DEBUG" > loggerName: "a.B" > marker: > name: "Marker1" > parents: > - name: "ParentMarker1" > parents: > - name: "GrandMotherMarker" > - name: "GrandFatherMarker" > - name: "ParentMarker2" > message: "Msg" > thrown: > commonElementCount: 0 > localizedMessage: "testIOEx" > message: "testIOEx" > name: "java.io.IOException" > cause: > commonElementCount: 38 > localizedMessage: "testNPEx" > message: "testNPEx" > name: "java.lang.NullPointerException" > suppressed: > - commonElementCount: 0 > localizedMessage: "I am suppressed exception 1" > message: "I am suppressed exception 1" > name: "java.lang.IndexOutOfBoundsException" > - commonElementCount: 0 > localizedMessage: "I am suppressed exception 2" > message: "I am suppressed exception 2" > name: "java.lang.IndexOutOfBoundsException" > contextStack: > - "stack_msg1" > - "stack_msg2" > endOfBatch: false > loggerFqcn: "f.q.c.n" > instant: > epochSecond: 0 > nanoOfSecond: 100 > threadId: 1 > threadPriority: 5 > KEY1: "VALUE1" > KEY2: "OpenJDK Runtime Environment (build > 1.8.0_312-bre_2021_10_20_23_15-b00) from\ > \ Homebrew" > > [INFO] > [ERROR] Tests run: 2063, Failures: 1, Errors: 0, Skipped: 21 > > Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537) > Maven home: /usr/local/Cellar/maven/3.8.4/libexec > Java version: 1.8.0_312, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk@8 > /1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "12.0.1", arch: "x86_64", family: "mac" > > I can reproduce this from Eclipse by running the one test class. > > The test uses a Java lookup here: > > https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L312 > > And expects it to be present here: > > https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L318 > > (1) Should this test pass or fail? I thought we disabled lookups _except_ > in configuration files. > (2) If the test should pass, is _my_ failure due to some line length or > line wrapping issue? > > TY and congrats to all of us for spending so much time on this, > Gary > > > On Tue, Dec 14, 2021 at 12:58 AM Ralph Goers > wrote: > > > This is a vote to release Log4j 2.12.2, a security release for Java 7 > > users. > > > > Please download, test, and cast your votes on the log4j developers list. > > [] +1, release the artifacts > > [] -1, don't release because... > > > > The vote will remain open for as short amount as time as required to vet > > the release. All votes are welcome and we encourage everyone to test the > > release, but only Logging PMC votes are “officially” counted. As always, > at > > least 3 +1 votes and more positive than negative votes are required. > > > > Changes in this version include: > > > > Fixed Bugs > > > > • LO
Re: [VOTE] Release Log4j 2.12.2-rc1
After checking out the tag (git status says 'HEAD detached at log4j-2.12.2-rc1') and running 'mvn clean install' with Java 8 and Maven 3.8.4, I get: [INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.351 s - in org.apache.logging.log4j.MarkerMixInJsonTest [INFO] [INFO] Results: [INFO] [ERROR] Failures: [ERROR] YamlLayoutTest.testAdditionalFields:318 --- thread: "MyThreadName" level: "DEBUG" loggerName: "a.B" marker: name: "Marker1" parents: - name: "ParentMarker1" parents: - name: "GrandMotherMarker" - name: "GrandFatherMarker" - name: "ParentMarker2" message: "Msg" thrown: commonElementCount: 0 localizedMessage: "testIOEx" message: "testIOEx" name: "java.io.IOException" cause: commonElementCount: 38 localizedMessage: "testNPEx" message: "testNPEx" name: "java.lang.NullPointerException" suppressed: - commonElementCount: 0 localizedMessage: "I am suppressed exception 1" message: "I am suppressed exception 1" name: "java.lang.IndexOutOfBoundsException" - commonElementCount: 0 localizedMessage: "I am suppressed exception 2" message: "I am suppressed exception 2" name: "java.lang.IndexOutOfBoundsException" contextStack: - "stack_msg1" - "stack_msg2" endOfBatch: false loggerFqcn: "f.q.c.n" instant: epochSecond: 0 nanoOfSecond: 100 threadId: 1 threadPriority: 5 KEY1: "VALUE1" KEY2: "OpenJDK Runtime Environment (build 1.8.0_312-bre_2021_10_20_23_15-b00) from\ \ Homebrew" [INFO] [ERROR] Tests run: 2063, Failures: 1, Errors: 0, Skipped: 21 Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537) Maven home: /usr/local/Cellar/maven/3.8.4/libexec Java version: 1.8.0_312, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@8/1.8.0+312/libexec/openjdk.jdk/Contents/Home/jre Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "12.0.1", arch: "x86_64", family: "mac" I can reproduce this from Eclipse by running the one test class. The test uses a Java lookup here: https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L312 And expects it to be present here: https://github.com/apache/logging-log4j2/blob/ad361d2e517e765f69db464d9407ac2dd80bc93e/log4j-core/src/test/java/org/apache/logging/log4j/core/layout/YamlLayoutTest.java#L318 (1) Should this test pass or fail? I thought we disabled lookups _except_ in configuration files. (2) If the test should pass, is _my_ failure due to some line length or line wrapping issue? TY and congrats to all of us for spending so much time on this, Gary On Tue, Dec 14, 2021 at 12:58 AM Ralph Goers wrote: > This is a vote to release Log4j 2.12.2, a security release for Java 7 > users. > > Please download, test, and cast your votes on the log4j developers list. > [] +1, release the artifacts > [] -1, don't release because... > > The vote will remain open for as short amount as time as required to vet > the release. All votes are welcome and we encourage everyone to test the > release, but only Logging PMC votes are “officially” counted. As always, at > least 3 +1 votes and more positive than negative votes are required. > > Changes in this version include: > > Fixed Bugs > > • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove > message lookups. When enabled JNDI only supports the java protocol. > > Tag: > a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git"; and then "git checkout > tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 > https://github.com/apache/logging-log4j2.git"; > b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.2-rc1” > > Web Site: No web site was generated for this release. The 2.16.0 web site > will be updated appropriately. > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1070 > > Distribution archives: > https://dist.apache.org/repos/dist/dev/logging/log4j/ > > You may download all the Maven artifacts by executing: > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/
Re: [VOTE] Release Log4j 2.12.2-rc1
+1 Builds fine, sigs good, etc. On Mon, Dec 13, 2021 at 11:58 PM Ralph Goers wrote: > > This is a vote to release Log4j 2.12.2, a security release for Java 7 users. > > Please download, test, and cast your votes on the log4j developers list. > [] +1, release the artifacts > [] -1, don't release because... > > The vote will remain open for as short amount as time as required to vet the > release. All votes are welcome and we encourage everyone to test the release, > but only Logging PMC votes are “officially” counted. As always, at least 3 +1 > votes and more positive than negative votes are required. > > Changes in this version include: > > Fixed Bugs > > • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove > message lookups. When enabled JNDI only supports the java protocol. > > Tag: > a) for a new copy do "git clone > https://github.com/apache/logging-log4j2.git"; and then "git checkout > tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 > https://github.com/apache/logging-log4j2.git"; > b) for an existing working copy to “git pull” and then “git checkout > tags/log4j-2.12.2-rc1” > > Web Site: No web site was generated for this release. The 2.16.0 web site > will be updated appropriately. > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachelogging-1070 > > Distribution archives: https://dist.apache.org/repos/dist/dev/logging/log4j/ > > You may download all the Maven artifacts by executing: > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/
[VOTE] Release Log4j 2.12.2-rc1
This is a vote to release Log4j 2.12.2, a security release for Java 7 users. Please download, test, and cast your votes on the log4j developers list. [] +1, release the artifacts [] -1, don't release because... The vote will remain open for as short amount as time as required to vet the release. All votes are welcome and we encourage everyone to test the release, but only Logging PMC votes are “officially” counted. As always, at least 3 +1 votes and more positive than negative votes are required. Changes in this version include: Fixed Bugs • LOG4J-3220: Disable JNDI by default, remove JNDI Lookup, remove message lookups. When enabled JNDI only supports the java protocol. Tag: a) for a new copy do "git clone https://github.com/apache/logging-log4j2.git"; and then "git checkout tags/log4j-2.12.2-rc1” or just "git clone -b log4j-2.12.2-rc1 https://github.com/apache/logging-log4j2.git"; b) for an existing working copy to “git pull” and then “git checkout tags/log4j-2.12.2-rc1” Web Site: No web site was generated for this release. The 2.16.0 web site will be updated appropriately. Maven Artifacts: https://repository.apache.org/content/repositories/orgapachelogging-1070 Distribution archives: https://dist.apache.org/repos/dist/dev/logging/log4j/ You may download all the Maven artifacts by executing: wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate https://repository.apache.org/content/repositories/orgapachelogging-1070/org/apache/logging/log4j/
