dec 18, 2021 - Log4j 2.17 release

Description:

Fix string substitution recursion. Fixes LOG4J2-3230
Limit JNDI to the java protocol only. JNDI will remain disabled by default. Rename JNDI enablement property from 'log4j2.enableJndi' to 'log4j2.enableJndiLookup', 'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'. Fixes LOG4J2-3242.
Limit JNDI to the java protocol only. JNDI will remain disabled by default. The enablement property has been renamed to 'log4j2.enableJndiJava'. Fixes LOG4J2-3242.

Added to timeline:

timeline log4j - log4shell

ByManuel -

30 Dec 2021

2712

Date:

dec 18, 2021

Now

~ 3 years and 9 months ago