Re: [PR] Improves Threat Model [logging-site]

2025-03-20 Thread via GitHub
ppkarwasz commented on PR #10: URL: https://github.com/apache/logging-site/pull/10#issuecomment-2740203503 @emilazy, how does this look? I have the impression that our [YesWeHack](https://yeswehack.com/programs/log4j-bug-bounty-program) only attracts unreasonable people that try to m

Re: [I] Possible bug in LoggerContext.updateLoggers throwing ConcurrentModificationException [logging-log4j2]

2025-03-20 Thread via GitHub
ppkarwasz commented on issue #3551: URL: https://github.com/apache/logging-log4j2/issues/3551#issuecomment-2740369659 No problem! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific com

[PR] Fix typo in `Filter.java` [logging-log4j2]

2025-03-20 Thread via GitHub
chrjohn opened a new pull request, #3561: URL: https://github.com/apache/logging-log4j2/pull/3561 The result that can returned from a filter method call -> The result that can **be** returned from a filter method call -- This is an automated message from the Apache Git Service. To respond

Re: [PR] Add transitive compileOnlyApi (requires static) dependencies [logging-log4j2]

2025-03-20 Thread via GitHub
jjohannes commented on code in PR #3450: URL: https://github.com/apache/logging-log4j2/pull/3450#discussion_r2005610890 ## log4j-parent/pom.xml: ## @@ -154,6 +154,15 @@ 4.4.16 5.16.0 + +$[bnd-module-name];access=0;modules=" + biz.aQute.bnd.annotation, +

Re: [PR] Bump org.springframework.cloud:spring-cloud-context from 4.2.0 to 4.2.1 [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3557: URL: https://github.com/apache/logging-log4j2/pull/3557 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

Re: [PR] Bump org.eclipse.jgit:org.eclipse.jgit from 7.1.0.202411261347-r to 7.2.0.202503040940-r [logging-parent]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #355: URL: https://github.com/apache/logging-parent/pull/355 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications

Re: [I] Broken Link to Mailing List on Project Information Page [logging-log4j2]

2025-03-20 Thread via GitHub
Boobalanraj closed issue #3536: Broken Link to Mailing List on Project Information Page URL: https://github.com/apache/logging-log4j2/issues/3536 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Bump org.springframework.cloud:spring-cloud-context from 4.2.0 to 4.2.1 in /log4j-spring-cloud-config-client [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3560: URL: https://github.com/apache/logging-log4j2/pull/3560 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

Re: [PR] Bump org.apache.commons:commons-csv from 1.13.0 to 1.14.0 in /log4j-parent [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3559: URL: https://github.com/apache/logging-log4j2/pull/3559 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

Re: [I] RollingFileAppender overwrites an old log even if AppendToFile is true when RollingStyle is Composite and there are some logs on that day. (logging-log4net)

2025-03-20 Thread via GitHub
WorldRobertProject commented on issue #163: URL: https://github.com/apache/logging-log4net/issues/163#issuecomment-2741979323 Now when "DatePattern" is "-MM-dd", it reproduces the issue. ``` log4net:ERROR RollingFileAppender: INTERNAL ERROR. Append is False but OutputFile [...

Re: [I] Possible bug in LoggerContext.updateLoggers throwing ConcurrentModificationException [logging-log4j2]

2025-03-20 Thread via GitHub
pmk75 commented on issue #3551: URL: https://github.com/apache/logging-log4j2/issues/3551#issuecomment-2739746538 Many thanks @ppkarwasz and sorry for disturbance -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the U

Re: [PR] Bump guava.version from 33.4.0-jre to 33.4.5-jre [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3554: URL: https://github.com/apache/logging-log4j2/pull/3554 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

Re: [PR] Enabled GH discussions [logging-log4j2]

2025-03-20 Thread via GitHub
grobmeier commented on code in PR #3552: URL: https://github.com/apache/logging-log4j2/pull/3552#discussion_r2005423566 ## .asf.yaml: ## @@ -37,6 +37,7 @@ github: homepage: https://logging.apache.org/log4j/2.x features: issues: true +discussions: true Review Comm

Re: [PR] Bump org.apache.groovy:groovy-bom from 4.0.25 to 4.0.26 [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3507: URL: https://github.com/apache/logging-log4j2/pull/3507 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

[PR] Improves Threat Model [logging-site]

2025-03-20 Thread via GitHub
ppkarwasz opened a new pull request, #10: URL: https://github.com/apache/logging-site/pull/10 In this PR, we expand our threat model to cover: - A better definition of the users we trust and those we don't. - A list of resources that untrusted users should not control. - A clear

Re: [PR] Fix typo in `Filter.java` [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] commented on PR #3561: URL: https://github.com/apache/logging-log4j2/pull/3561#issuecomment-2740440011 Job Requested goals Build Tool Version Build Outcome Build ScanĀ® build-

Re: [PR] Bump spring-framework.version from 6.2.4 to 6.2.5 [logging-log4j2]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #3556: URL: https://github.com/apache/logging-log4j2/pull/3556 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notificatio

[I] StatusData#getFormattedStatus can throw ArrayIndexOutOfBoundsException [logging-log4j2]

2025-03-20 Thread via GitHub
bjlaub opened a new issue, #3562: URL: https://github.com/apache/logging-log4j2/issues/3562 ## Description It's possible for `StatusData#getFormattedStatus()` to throw an `ArrayIndexOutOfBoundsException` when given a message with a non-null, 0-length `parameters` array. This happens

Re: [PR] Bump actions/cache from 4.2.2 to 4.2.3 [logging-parent]

2025-03-20 Thread via GitHub
github-actions[bot] merged PR #357: URL: https://github.com/apache/logging-parent/pull/357 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications