[GitHub] [logging-log4j2] ppkarwasz commented on a change in pull request #753: Issues with multiple Log4j 1.x filters

2022-02-14 Thread GitBox
ppkarwasz commented on a change in pull request #753: URL: https://github.com/apache/logging-log4j2/pull/753#discussion_r806304150 ## File path: log4j-1.2-api/src/main/java/org/apache/log4j/bridge/FilterAdapter.java ## @@ -37,14 +81,14 @@ public Result filter(LogEvent event)

[GitHub] [logging-log4j2] dependabot[bot] opened a new pull request #754: Bump maven-bundle-plugin from 3.5.0 to 5.1.4

2022-02-14 Thread GitBox
dependabot[bot] opened a new pull request #754: URL: https://github.com/apache/logging-log4j2/pull/754 Bumps maven-bundle-plugin from 3.5.0 to 5.1.4. [![Dependabot compatibility

[GitHub] [logging-log4j2] garydgregory commented on pull request #630: Log4j2 is still vulnerable and underspecified. This updates documenta…

2022-02-14 Thread GitBox
garydgregory commented on pull request #630: URL: https://github.com/apache/logging-log4j2/pull/630#issuecomment-1039676373 I agree with all of @rgoers 's points. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the

[GitHub] [logging-log4j2] ppkarwasz commented on a change in pull request #753: Issues with multiple Log4j 1.x filters

2022-02-14 Thread GitBox
ppkarwasz commented on a change in pull request #753: URL: https://github.com/apache/logging-log4j2/pull/753#discussion_r806306691 ## File path: log4j-core/src/main/java/org/apache/logging/log4j/core/filter/CompositeFilter.java ## @@ -62,9 +62,9 @@ public CompositeFilter

[GitHub] [logging-log4j2] ppkarwasz commented on a change in pull request #753: Issues with multiple Log4j 1.x filters

2022-02-14 Thread GitBox
ppkarwasz commented on a change in pull request #753: URL: https://github.com/apache/logging-log4j2/pull/753#discussion_r806304150 ## File path: log4j-1.2-api/src/main/java/org/apache/log4j/bridge/FilterAdapter.java ## @@ -37,14 +81,14 @@ public Result filter(LogEvent event)

[GitHub] [logging-log4j2] ppkarwasz opened a new pull request #753: Issues with multiple Log4j 1.x filters

2022-02-14 Thread GitBox
ppkarwasz opened a new pull request #753: URL: https://github.com/apache/logging-log4j2/pull/753 This PR fixes a couple of issues concerning filters in the Log4j 1.x bridge: - there is an endless loop in `FilterAdapter#filter` that hangs the program if more than one filter per

[GitHub] [logging-log4j2] rgoers commented on pull request #630: Log4j2 is still vulnerable and underspecified. This updates documenta…

2022-02-14 Thread GitBox
rgoers commented on pull request #630: URL: https://github.com/apache/logging-log4j2/pull/630#issuecomment-1039639817 1. This is a pull request not an issue. If you wanted an issue you would need to use Jira. 2. This is not even close to being a vulnerability. In no world has a

[GitHub] [logging-log4j2] fulldecent commented on pull request #630: Log4j2 is still vulnerable and underspecified. This updates documenta…

2022-02-14 Thread GitBox
fulldecent commented on pull request #630: URL: https://github.com/apache/logging-log4j2/pull/630#issuecomment-1039618532 @vy The mailing list post you cite argues that "API isn't intended to be interpreted..." Therefore, Log4j2 is still underspecified. That is the subject of

[jira] [Commented] (LOG4J2-3393) JSON template layout performance regression

2022-02-14 Thread ASF subversion and git services (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3393?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17492239#comment-17492239 ] ASF subversion and git services commented on LOG4J2-3393: - Commit

[GitHub] [logging-log4j2] mikkorantalainen commented on pull request #630: Log4j2 is still vulnerable and underspecified. This updates documenta…

2022-02-14 Thread GitBox
mikkorantalainen commented on pull request #630: URL: https://github.com/apache/logging-log4j2/pull/630#issuecomment-1039259530 > I am also inclined to avoid convoluting the API with implementation details. Messages are safe, it is how the implementation deals with them which makes them

[jira] [Comment Edited] (LOG4J2-3402) Log4j Kotlin API 1.2.0 not released yet, but project version already at 1.3.0-SNAPSHOT

2022-02-14 Thread Nils Breunese (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491890#comment-17491890 ] Nils Breunese edited comment on LOG4J2-3402 at 2/14/22, 12:40 PM: -- Yes,

[jira] [Commented] (LOG4J2-3328) Log4j 1.2 bridge does not support system properties in log4j.xml

2022-02-14 Thread Gary D. Gregory (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3328?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491961#comment-17491961 ] Gary D. Gregory commented on LOG4J2-3328: - Hi [~john215], my guess is within one month. > Log4j

[jira] [Comment Edited] (LOG4J2-3402) Log4j Kotlin API 1.2.0 not released yet, but project version already at 1.3.0-SNAPSHOT

2022-02-14 Thread Nils Breunese (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491890#comment-17491890 ] Nils Breunese edited comment on LOG4J2-3402 at 2/14/22, 9:34 AM: - Yes,

[jira] [Commented] (LOG4J2-3402) Log4j Kotlin API 1.2.0 not released yet, but project version already at 1.3.0-SNAPSHOT

2022-02-14 Thread Nils Breunese (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491890#comment-17491890 ] Nils Breunese commented on LOG4J2-3402: --- Yes, the version technically can just be any garbage

[GitHub] [logging-log4j2] vy merged pull request #752: Bump maven-jxr-plugin from 2.5 to 3.1.1

2022-02-14 Thread GitBox
vy merged pull request #752: URL: https://github.com/apache/logging-log4j2/pull/752 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[jira] [Commented] (LOG4J2-3328) Log4j 1.2 bridge does not support system properties in log4j.xml

2022-02-14 Thread John Simiyon (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3328?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491848#comment-17491848 ] John Simiyon commented on LOG4J2-3328: -- Hi [~ggregory] , Any update on 2.17.2 release ? > Log4j