log4net > Vulnerability > CVE-2021-24112

2022-10-27 Thread miguel.carvajal
Hello, In our CI pipeline, we detected vulnerability CVE-2021-24112, which affects the System.Drawing.Common 5.0.0 package, which is a dependency of log4net 2.0.15. > dotnet list package --vulnerable --include-transitive > System.Drawing.Common 5.0.0 Critical https://github.co

Re: [log4cxx] Github windows builds

2022-10-27 Thread Robert Middleton
Upon further investigation, it appears as though it was the cache functionality that broke. Updating from v2 to v3 seems to have fixed the problem. It looks like when you updated vcpkg to the latest version that fixed it for one build, probably because the yml file changed or something? Anyway, i

Re: [log4cxx] Github windows builds

2022-10-27 Thread Stephen Webb
There are 3(logchar type) x 4(charset type) x 2(unichar?) x 2(wchar_t?) x 2(prefer_boost?) x 2(qt_support?) =192 combinations of build options log4cxx provides of which only one is being tested. What should we do with those? On Fri, Oct 28, 2022 at 12:23 PM Robert Middleton wrote: > Upon furth