apache-log4j2 2.17.0- source package in Ubuntu


apache-log4j2 (2.17.0- focal-security; urgency=medium

  * SECURITY UPDATE: Denial of service via uncontrolled recursion
    - Updated to new upstream version 2.17.0.
    - CVE-2021-45105

 -- Marc Deslauriers <email address hidden>  Sun, 19 Dec 2021 07:44:06 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Original maintainer:
Debian Java Maintainers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section


Focal: [FULLYBUILT] amd64


File Size SHA-256 Checksum
apache-log4j2_2.17.0.orig.tar.xz 1.2 MiB 7c9a8976f9672bf7cc31ded21b2dddc5f6a3cee4621e53dfe5aab65ef82eae24
apache-log4j2_2.17.0- 7.0 KiB bc9617bdba217dce19340365b351f8e8d6310d7af8e8d841ecf55d99f28440e2
apache-log4j2_2.17.0- 3.0 KiB 46606888bf0ad8abf96c45ed995091fd795e703ad771dc0c4d91f9d144d75cc7

View changes file

Binary packages built by this source

liblog4j2-java: Apache Log4j - Logging Framework for Java

 Apache Log4j 2 is an upgrade to Log4j that provides significant improvements
 over its predecessor, Log4j 1.x:
 API Separation: The API for Log4j is separate from the implementation making
 it clear for application developers which classes and methods they can use
 while ensuring forward compatibility.
 Improved Performance: Log4j 2 contains next-generation Asynchronous Loggers
 based on the LMAX Disruptor library. In multi-threaded scenarios Asynchronous
 Loggers have 10 times higher throughput and orders of magnitude lower latency
 than Log4j 1.x.
 Support for multiple APIs: While the Log4j 2 API will provide the best
 performance, Log4j 2 provides support for the SLF4J and Commons Logging APIs.
 Automatic Reloading of Configurations: Log4j 2 can automatically reload its
 configuration upon modification. It will do so without losing log events
 while reconfiguration is taking place.
 Advanced Filtering: Log4j 2 supports filtering based on context
 data, markers, regular expressions, and other components in the Log event.
 Filtering can be specified to apply to all events before being passed to
 Loggers or as they pass through Appenders.
 Plugin Architecture: Log4j uses the plugin pattern to configure components.
 As such, no code is needed to create and configure an Appender, Layout,
 Pattern Converter, and so on. Log4j automatically recognizes plugins
 and uses them when a configuration references them.
 Property Support: Properties can be referenced in a configuration, Log4j will
 directly replace them, or Log4j will pass them to an underlying component that
 will dynamically resolve them. Properties come from values defined in the
 configuration file, system properties, environment variables, the
 ThreadContext Map, and data present in the event.

liblog4j2-java-doc: Documentation for Apache Log4j 2

 Apache Log4j 2 is an upgrade to Log4j that provides significant improvements
 over its predecessor, Log4j 1.x.
 This package contains the API documentation of liblog4j2-java.