Skip to content
This repository was archived by the owner on Sep 13, 2023. It is now read-only.

Commit e3e086f

Browse files
committed
Fix site generation after plugin upgrade.
Copy over missing 1.2 content from the HTML site.
1 parent 851b299 commit e3e086f

File tree

13 files changed

+779
-2
lines changed

13 files changed

+779
-2
lines changed

src/site/apt/index.apt

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,25 @@
1313
~~ See the License for the specific language governing permissions and
1414
~~ limitations under the License.
1515

16+
Security Vulnerabilities
17+
18+
A security vulnerability,
19+
{{{https://www.cvedetails.com/cve/CVE-2019-17571/}CVE-2019-17571}} has
20+
been identified against Log4j 1. Log4j includes a SocketServer that
21+
accepts serialized log events and deserializes them without verifying
22+
whether the objects are allowed or not.
23+
24+
This can provide an attack vector that can be expoited. Since Log4j 1 is
25+
no longer maintained this issue will not be fixed. Users are urged to
26+
upgrade to Log4j 2.
27+
28+
Java Version Incompatibilities
29+
30+
The version detection algorithm changed in Java 9 which causes the MDC
31+
not to work properly. See
32+
{{{https://blogs.apache.org/logging/entry/moving_on_to_log4j_2}Log4j 1.2 is broken on Java 9}}
33+
for details.
34+
1635
Apache log4j\u2122 1.2
1736

1837
Welcome to Apache log4j, a logging library for Java. Apache log4j

0 commit comments

Comments
 (0)