[GitHub] logging-log4j2 issue #71: [LOG4J2-1874] Add ByteBufferDestionation.write(Byt...

2017-04-17 Thread leventov
Github user leventov commented on the issue: https://github.com/apache/logging-log4j2/pull/71 @remkop renamed. Yes, OutputStreamManager.write(byte[], int, int) has the same semantics. --- If your project is set up for it, you can reply to this email and have your reply appear on GitH

[jira] [Commented] (LOG4J2-1874) Add ByteBufferDestionation.write(ByteBuffer) and write(byte[], int, int) methods and call them from TextEncoderHelper whenever possible

2017-04-17 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/LOG4J2-1874?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15971590#comment-15971590 ] ASF GitHub Bot commented on LOG4J2-1874: Github user leventov commented on the is

[jira] [Created] (LOG4J2-1885) documentation error regarding additivity default value

2017-04-17 Thread Hal Deadman (JIRA)
Hal Deadman created LOG4J2-1885: --- Summary: documentation error regarding additivity default value Key: LOG4J2-1885 URL: https://issues.apache.org/jira/browse/LOG4J2-1885 Project: Log4j 2 Issue

[jira] [Closed] (LOG4J2-1863) Add support for filtering input in TcpSocketServer and UdpSocketServer

2017-04-17 Thread Matt Sicker (JIRA)
[ https://issues.apache.org/jira/browse/LOG4J2-1863?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matt Sicker closed LOG4J2-1863. --- > Add support for filtering input in TcpSocketServer and UdpSocketServer > --

CVE-2017-5645: Apache Log4j socket receiver deserialization vulnerability

2017-04-17 Thread Matt Sicker
CVE-2017-5645: Apache Log4j socket receiver deserialization vulnerability Severity: High CVSS Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendor: The Apache Software Foundation Versions Affected: all versions from 2.0-alpha1 to 2.8.1 Description: When using the TCP socket server or UDP socket

[jira] [Updated] (LOG4J2-1863) Add support for filtering input in TcpSocketServer and UdpSocketServer

2017-04-17 Thread Matt Sicker (JIRA)
[ https://issues.apache.org/jira/browse/LOG4J2-1863?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matt Sicker updated LOG4J2-1863: Description: It is best practice to add a configurable class filter to ObjectInputStream usage whe