Re: [I] PatternLayout unsuitable for production purposes (logging-log4j2)

2024-05-05 Thread via GitHub
marcelhoelscher commented on issue #2518: URL: https://github.com/apache/logging-log4j2/issues/2518#issuecomment-2095301974 Hey @ppkarwasz, thanks for your reply! We're not concerned about developers putting CR or LF into log messages, we're concerned about attackers who (for

Re: [I] spring boot 3.2.4 + spring-boot-starter-log4j2 + spring-boot-starter-undertow (logging-log4j2)

2024-05-05 Thread via GitHub
mpv945 commented on issue #2453: URL: https://github.com/apache/logging-log4j2/issues/2453#issuecomment-2095293319 > @mpv945, > > 这应该由版本 3.1.11 和 3.2.5 中的[spring-projects/spring-boot#40178](https://github.com/spring-projects/spring-boot/issues/40178)修复。你能检查一下吗? > @mpv9

[PR] Join background threads when LOG4CXX_EVENTS_AT_EXIT=on [logging-log4cxx]

2024-05-05 Thread via GitHub
swebb2066 opened a new pull request, #381: URL: https://github.com/apache/logging-log4cxx/pull/381 This PR ensures Log4cxx threads are joined even when LogManage::shutdown is never called -- This is an automated message from the Apache Git Service. To respond to the message, please log on

Re: [PR] Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1 [logging-log4j-samples]

2024-05-05 Thread via GitHub
github-actions[bot] merged PR #133: URL: https://github.com/apache/logging-log4j-samples/pull/133 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifi