@@ -217,6 +217,6 @@
- log4j-2.14.1-rc1
+ log4j-2.15.0-rc1
diff --git a/log4j-cassandra/pom.xml b/log4j-cassandra/pom.xml
index dc20877..9d3fd5c 100644
--- a/log4j-cassandra/pom.xml
+++ b/log4j-cassandra/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-core-its/pom.xml b/log4j-core-its/pom.xml
index c1625c0..97d2a07 100644
--- a/log4j-core-its/pom.xml
+++ b/log4j-core-its/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-core-its
diff --git a/log4j-core-java9/pom.xml b/log4j-core-java9/pom.xml
index dec5c37..af6eb11 100644
--- a/log4j-core-java9/pom.xml
+++ b/log4j-core-java9/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-core-java9
diff --git a/log4j-core/pom.xml b/log4j-core/pom.xml
index ac769dd..395c0c3 100644
--- a/log4j-core/pom.xml
+++ b/log4j-core/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-core
diff --git a/log4j-core/src/main/java/org/apache/logging/log4j/core/lookup/JndiLookup.java b/log4j-core/src/main/java/org/apache/logging/log4j/core/lookup/JndiLookup.java
index 30e65ad..4627fa1 100644
--- a/log4j-core/src/main/java/org/apache/logging/log4j/core/lookup/JndiLookup.java
+++ b/log4j-core/src/main/java/org/apache/logging/log4j/core/lookup/JndiLookup.java
@@ -27,9 +27,13 @@
import org.apache.logging.log4j.core.config.plugins.Plugin;
import org.apache.logging.log4j.core.net.JndiManager;
import org.apache.logging.log4j.status.StatusLogger;
+import org.apache.logging.log4j.util.PropertiesUtil;
/**
* Looks up keys from JNDI resources.
+ *
+ * As of 2.15.0, JNDI lookups are disabled by default to address CVE-2021-44228. To enable,
+ * set the system property {@code log4j2.enableJndiLookup} to {@code true}.
*/
@Plugin(name = "jndi", category = StrLookup.CATEGORY)
public class JndiLookup extends AbstractLookup {
@@ -40,6 +44,14 @@ public class JndiLookup extends AbstractLookup {
/** JNDI resource path prefix used in a J2EE container */
static final String CONTAINER_JNDI_RESOURCE_PATH_PREFIX = "java:comp/env/";
+ /**
+ * Returns {@code true} if JNDI lookups are enabled via the {@code log4j2.enableJndiLookup}
+ * system property. Disabled by default as of 2.15.0 (CVE-2021-44228).
+ */
+ static boolean isJndiEnabled() {
+ return PropertiesUtil.getProperties().getBooleanProperty("log4j2.enableJndiLookup", false);
+ }
+
/**
* Looks up the value of the JNDI resource.
* @param event The current LogEvent (is ignored by this StrLookup).
@@ -48,6 +60,10 @@ public class JndiLookup extends AbstractLookup {
*/
@Override
public String lookup(final LogEvent event, final String key) {
+ if (!isJndiEnabled()) {
+ LOGGER.warn(LOOKUP, "JNDI lookup is disabled. Set log4j2.enableJndiLookup=true to enable.");
+ return null;
+ }
if (key == null) {
return null;
}
diff --git a/log4j-core/src/main/java/org/apache/logging/log4j/core/util/Constants.java b/log4j-core/src/main/java/org/apache/logging/log4j/core/util/Constants.java
index fa01c13..fd3c1cf 100644
--- a/log4j-core/src/main/java/org/apache/logging/log4j/core/util/Constants.java
+++ b/log4j-core/src/main/java/org/apache/logging/log4j/core/util/Constants.java
@@ -58,10 +58,13 @@ public final class Constants {
* LOG4J2-2109 if {@code true}, MessagePatternConverter will always operate as though
* %m{nolookups} is configured.
*
+ * Defaults to {@code true} as of 2.15.0 to address CVE-2021-44228. Set to {@code false}
+ * only if you trust all data that may appear in log messages.
+ *
* @since 2.10
*/
public static final boolean FORMAT_MESSAGES_PATTERN_DISABLE_LOOKUPS = PropertiesUtil.getProperties().getBooleanProperty(
- "log4j2.formatMsgNoLookups", false);
+ "log4j2.formatMsgNoLookups", true);
/**
* {@code true} if we think we are running in a web container, based on the boolean value of system property
diff --git a/log4j-core/src/test/java/org/apache/logging/log4j/core/appender/routing/RoutingAppenderWithJndiTest.java b/log4j-core/src/test/java/org/apache/logging/log4j/core/appender/routing/RoutingAppenderWithJndiTest.java
index 02a8a79..b69dd30 100644
--- a/log4j-core/src/test/java/org/apache/logging/log4j/core/appender/routing/RoutingAppenderWithJndiTest.java
+++ b/log4j-core/src/test/java/org/apache/logging/log4j/core/appender/routing/RoutingAppenderWithJndiTest.java
@@ -28,7 +28,9 @@
import org.apache.logging.log4j.message.StructuredDataMessage;
import org.apache.logging.log4j.test.appender.ListAppender;
import org.junit.After;
+import org.junit.AfterClass;
import org.junit.Before;
+import org.junit.BeforeClass;
import org.junit.ClassRule;
import org.junit.Test;
import org.junit.rules.RuleChain;
@@ -37,6 +39,9 @@
/**
* RoutingAppenderWithJndiTest
+ *
+ * Note: this test explicitly enables JNDI lookups via the {@code log4j2.enableJndiLookup} system
+ * property because JNDI lookups are disabled by default as of 2.15.0 (CVE-2021-44228).
*/
public class RoutingAppenderWithJndiTest {
@@ -50,6 +55,17 @@ public class RoutingAppenderWithJndiTest {
public static RuleChain rules = RuleChain.outerRule(new JndiRule(Collections.emptyMap()))
.around(loggerContextRule);
+ @BeforeClass
+ public static void enableJndi() {
+ // Explicitly enable JNDI for this test; disabled by default as of 2.15.0 (CVE-2021-44228)
+ System.setProperty("log4j2.enableJndiLookup", "true");
+ }
+
+ @AfterClass
+ public static void disableJndi() {
+ System.clearProperty("log4j2.enableJndiLookup");
+ }
+
@Before
public void before() throws NamingException {
listAppender1 = RoutingAppenderWithJndiTest.loggerContextRule.getListAppender("List1");
diff --git a/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/InterpolatorTest.java b/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/InterpolatorTest.java
index 9e55563..e9ad13c 100644
--- a/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/InterpolatorTest.java
+++ b/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/InterpolatorTest.java
@@ -22,7 +22,6 @@
import java.util.Map;
import org.apache.logging.log4j.ThreadContext;
-import org.apache.logging.log4j.junit.JndiRule;
import org.junit.ClassRule;
import org.junit.Test;
import org.junit.rules.ExternalResource;
@@ -39,9 +38,6 @@ public class InterpolatorTest {
private static final String TESTKEY2 = "TestKey2";
private static final String TESTVAL = "TestValue";
- private static final String TEST_CONTEXT_RESOURCE_NAME = "logging/context-name";
- private static final String TEST_CONTEXT_NAME = "app-1";
-
@ClassRule
public static RuleChain rules = RuleChain.outerRule(new ExternalResource() {
@Override
@@ -55,8 +51,7 @@ protected void after() {
System.clearProperty(TESTKEY);
System.clearProperty(TESTKEY2);
}
- }).around(new JndiRule(
- JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + TEST_CONTEXT_RESOURCE_NAME, TEST_CONTEXT_NAME));
+ });
@Test
public void testLookup() {
@@ -77,8 +72,9 @@ public void testLookup() {
ThreadContext.clearMap();
value = lookup.lookup("ctx:" + TESTKEY);
assertEquals(TESTVAL, value);
- value = lookup.lookup("jndi:" + TEST_CONTEXT_RESOURCE_NAME);
- assertEquals(TEST_CONTEXT_NAME, value);
+ // JNDI lookup is disabled by default as of 2.15.0 (CVE-2021-44228)
+ value = lookup.lookup("jndi:logging/context-name");
+ assertNull(value);
}
private void assertLookupNotEmpty(final StrLookup lookup, final String key) {
@@ -95,8 +91,9 @@ public void testLookupWithDefaultInterpolator() {
assertEquals(TESTVAL, value);
value = lookup.lookup("env:PATH");
assertNotNull(value);
- value = lookup.lookup("jndi:" + TEST_CONTEXT_RESOURCE_NAME);
- assertEquals(TEST_CONTEXT_NAME, value);
+ // JNDI lookup is disabled by default as of 2.15.0 (CVE-2021-44228)
+ value = lookup.lookup("jndi:logging/context-name");
+ assertNull(value);
value = lookup.lookup("date:yyyy-MM-dd");
assertNotNull("No Date", value);
final SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd");
diff --git a/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/JndiLookupTest.java b/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/JndiLookupTest.java
index c2e34e3..b0a4972 100644
--- a/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/JndiLookupTest.java
+++ b/log4j-core/src/test/java/org/apache/logging/log4j/core/lookup/JndiLookupTest.java
@@ -16,13 +16,6 @@
*/
package org.apache.logging.log4j.core.lookup;
-import java.util.Arrays;
-import java.util.Collection;
-import java.util.HashMap;
-import java.util.Map;
-
-import org.apache.logging.log4j.junit.JndiRule;
-import org.junit.Rule;
import org.junit.Test;
import static org.junit.Assert.*;
@@ -32,45 +25,23 @@
*/
public class JndiLookupTest {
- private static final String TEST_CONTEXT_RESOURCE_NAME = "logging/context-name";
- private static final String TEST_CONTEXT_NAME = "app-1";
- private static final String TEST_INTEGRAL_NAME = "int-value";
- private static final int TEST_INTEGRAL_VALUE = 42;
- private static final String TEST_STRINGS_NAME = "string-collection";
- private static final Collection TEST_STRINGS_COLLECTION = Arrays.asList("one", "two", "three");
-
- @Rule
- public JndiRule jndiRule = new JndiRule(createBindings());
-
- private Map createBindings() {
- final Map map = new HashMap<>();
- map.put(JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + TEST_CONTEXT_RESOURCE_NAME, TEST_CONTEXT_NAME);
- map.put(JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + TEST_INTEGRAL_NAME, TEST_INTEGRAL_VALUE);
- map.put(JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + TEST_STRINGS_NAME, TEST_STRINGS_COLLECTION);
- return map;
- }
-
+ /**
+ * Verifies that JNDI lookups are disabled by default (CVE-2021-44228).
+ */
@Test
- public void testLookup() {
- final StrLookup lookup = new JndiLookup();
-
- String contextName = lookup.lookup(TEST_CONTEXT_RESOURCE_NAME);
- assertEquals(TEST_CONTEXT_NAME, contextName);
-
- contextName = lookup.lookup(JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + TEST_CONTEXT_RESOURCE_NAME);
- assertEquals(TEST_CONTEXT_NAME, contextName);
-
- final String nonExistingResource = lookup.lookup("logging/non-existing-resource");
- assertNull(nonExistingResource);
+ public void testJndiDisabledByDefault() {
+ assertFalse("JNDI lookup must be disabled by default (CVE-2021-44228)",
+ JndiLookup.isJndiEnabled());
}
+ /**
+ * Verifies that a lookup call returns null when JNDI is disabled.
+ */
@Test
- public void testNonStringLookup() throws Exception {
- // LOG4J2-1310
+ public void testLookupReturnsNullWhenDisabled() {
final StrLookup lookup = new JndiLookup();
- final String integralValue = lookup.lookup(TEST_INTEGRAL_NAME);
- assertEquals(String.valueOf(TEST_INTEGRAL_VALUE), integralValue);
- final String collectionValue = lookup.lookup(TEST_STRINGS_NAME);
- assertEquals(String.valueOf(TEST_STRINGS_COLLECTION), collectionValue);
+ // JNDI is disabled by default; all lookups should return null
+ assertNull(lookup.lookup("logging/context-name"));
+ assertNull(lookup.lookup(JndiLookup.CONTAINER_JNDI_RESOURCE_PATH_PREFIX + "logging/context-name"));
}
}
diff --git a/log4j-core/src/test/java/org/apache/logging/log4j/core/pattern/MessagePatternConverterTest.java b/log4j-core/src/test/java/org/apache/logging/log4j/core/pattern/MessagePatternConverterTest.java
index 04aad5f..4459cb2 100644
--- a/log4j-core/src/test/java/org/apache/logging/log4j/core/pattern/MessagePatternConverterTest.java
+++ b/log4j-core/src/test/java/org/apache/logging/log4j/core/pattern/MessagePatternConverterTest.java
@@ -76,8 +76,8 @@ public void testPatternAndParameterizedMessageDateLookup() {
}
@Test
- public void testLookupEnabledByDefault() {
- assertFalse(Constants.FORMAT_MESSAGES_PATTERN_DISABLE_LOOKUPS, "Expected lookups to be enabled");
+ public void testLookupDisabledByDefault() {
+ assertTrue(Constants.FORMAT_MESSAGES_PATTERN_DISABLE_LOOKUPS, "Expected lookups to be disabled by default (CVE-2021-44228)");
}
@Test
@@ -93,7 +93,8 @@ public void testLookup() {
.setMessage(msg).build();
final StringBuilder sb = new StringBuilder();
converter.format(event, sb);
- assertEquals("bar", sb.toString(), "Unexpected result");
+ // Lookups are disabled by default as of 2.15.0 (CVE-2021-44228); pattern is returned as-is
+ assertEquals("${foo}", sb.toString(), "Expected the raw pattern string without lookup");
}
@Test
diff --git a/log4j-couchdb/pom.xml b/log4j-couchdb/pom.xml
index 4dc320a..cec2580 100644
--- a/log4j-couchdb/pom.xml
+++ b/log4j-couchdb/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-distribution/pom.xml b/log4j-distribution/pom.xml
index 63c4219..3e1a7cf 100644
--- a/log4j-distribution/pom.xml
+++ b/log4j-distribution/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-distribution
diff --git a/log4j-docker/pom.xml b/log4j-docker/pom.xml
index 36d483a..a64a5b5 100644
--- a/log4j-docker/pom.xml
+++ b/log4j-docker/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-docker
diff --git a/log4j-flume-ng/pom.xml b/log4j-flume-ng/pom.xml
index 5291c10..cebdbec 100644
--- a/log4j-flume-ng/pom.xml
+++ b/log4j-flume-ng/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-flume-ng
diff --git a/log4j-iostreams/pom.xml b/log4j-iostreams/pom.xml
index c0e6614..e4fb479 100644
--- a/log4j-iostreams/pom.xml
+++ b/log4j-iostreams/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-iostreams
diff --git a/log4j-jcl/pom.xml b/log4j-jcl/pom.xml
index 7e5010a..6f91b47 100644
--- a/log4j-jcl/pom.xml
+++ b/log4j-jcl/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-jcl
diff --git a/log4j-jdbc-dbcp2/pom.xml b/log4j-jdbc-dbcp2/pom.xml
index 6b2fd67..78cfeca 100644
--- a/log4j-jdbc-dbcp2/pom.xml
+++ b/log4j-jdbc-dbcp2/pom.xml
@@ -11,7 +11,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-jmx-gui/pom.xml b/log4j-jmx-gui/pom.xml
index 94d1200..4fbb229 100644
--- a/log4j-jmx-gui/pom.xml
+++ b/log4j-jmx-gui/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-jmx-gui
diff --git a/log4j-jpa/pom.xml b/log4j-jpa/pom.xml
index 0b27de0..6613016 100644
--- a/log4j-jpa/pom.xml
+++ b/log4j-jpa/pom.xml
@@ -11,7 +11,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-jpl/pom.xml b/log4j-jpl/pom.xml
index 07fbd04..d93021e 100644
--- a/log4j-jpl/pom.xml
+++ b/log4j-jpl/pom.xml
@@ -20,7 +20,7 @@
log4j
org.apache.logging.log4j
- 2.14.1
+ 2.15.0
../
4.0.0
diff --git a/log4j-jul/pom.xml b/log4j-jul/pom.xml
index 65cfc8a..38776a6 100644
--- a/log4j-jul/pom.xml
+++ b/log4j-jul/pom.xml
@@ -20,7 +20,7 @@
log4j
org.apache.logging.log4j
- 2.14.1
+ 2.15.0
../
4.0.0
diff --git a/log4j-kubernetes/pom.xml b/log4j-kubernetes/pom.xml
index 1c44c8a..8c1e67f 100644
--- a/log4j-kubernetes/pom.xml
+++ b/log4j-kubernetes/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-kubernetes
diff --git a/log4j-layout-template-json/pom.xml b/log4j-layout-template-json/pom.xml
index 01f6b36..c2118e6 100644
--- a/log4j-layout-template-json/pom.xml
+++ b/log4j-layout-template-json/pom.xml
@@ -22,7 +22,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
log4j-layout-template-json
diff --git a/log4j-liquibase/pom.xml b/log4j-liquibase/pom.xml
index e3a8712..368bb8a 100644
--- a/log4j-liquibase/pom.xml
+++ b/log4j-liquibase/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-liquibase
diff --git a/log4j-mongodb3/pom.xml b/log4j-mongodb3/pom.xml
index ddc8c1d..64a9470 100644
--- a/log4j-mongodb3/pom.xml
+++ b/log4j-mongodb3/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-mongodb4/pom.xml b/log4j-mongodb4/pom.xml
index 9c8074a..f06259f 100644
--- a/log4j-mongodb4/pom.xml
+++ b/log4j-mongodb4/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/log4j-osgi/pom.xml b/log4j-osgi/pom.xml
index d36027d..8dab201 100644
--- a/log4j-osgi/pom.xml
+++ b/log4j-osgi/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-osgi
diff --git a/log4j-perf/pom.xml b/log4j-perf/pom.xml
index 60bbc92..ffdfdc9 100644
--- a/log4j-perf/pom.xml
+++ b/log4j-perf/pom.xml
@@ -20,7 +20,7 @@
log4j
org.apache.logging.log4j
- 2.14.1
+ 2.15.0
../
diff --git a/log4j-samples/log4j-samples-configuration/pom.xml b/log4j-samples/log4j-samples-configuration/pom.xml
index 9604a0a..0c0f02f 100644
--- a/log4j-samples/log4j-samples-configuration/pom.xml
+++ b/log4j-samples/log4j-samples-configuration/pom.xml
@@ -20,7 +20,7 @@
log4j-samples
org.apache.logging.log4j.samples
- 2.14.1
+ 2.15.0
log4j-samples-configuration
jar
diff --git a/log4j-samples/log4j-samples-flume-common/pom.xml b/log4j-samples/log4j-samples-flume-common/pom.xml
index e2cf323..078a001 100644
--- a/log4j-samples/log4j-samples-flume-common/pom.xml
+++ b/log4j-samples/log4j-samples-flume-common/pom.xml
@@ -20,7 +20,7 @@
log4j-samples
org.apache.logging.log4j.samples
- 2.14.1
+ 2.15.0
log4j-samples-flume-common
jar
diff --git a/log4j-samples/log4j-samples-flume-embedded/pom.xml b/log4j-samples/log4j-samples-flume-embedded/pom.xml
index 7ad8136..94ce3b1 100644
--- a/log4j-samples/log4j-samples-flume-embedded/pom.xml
+++ b/log4j-samples/log4j-samples-flume-embedded/pom.xml
@@ -20,7 +20,7 @@
log4j-samples
org.apache.logging.log4j.samples
- 2.14.1
+ 2.15.0
log4j-samples-flume-embedded
war
diff --git a/log4j-samples/log4j-samples-flume-remote/pom.xml b/log4j-samples/log4j-samples-flume-remote/pom.xml
index 12bd89e..975c8a3 100644
--- a/log4j-samples/log4j-samples-flume-remote/pom.xml
+++ b/log4j-samples/log4j-samples-flume-remote/pom.xml
@@ -20,7 +20,7 @@
log4j-samples
org.apache.logging.log4j.samples
- 2.14.1
+ 2.15.0
log4j-samples-flume-remote
war
diff --git a/log4j-samples/log4j-samples-loggerProperties/pom.xml b/log4j-samples/log4j-samples-loggerProperties/pom.xml
index b8afb81..b59f065 100644
--- a/log4j-samples/log4j-samples-loggerProperties/pom.xml
+++ b/log4j-samples/log4j-samples-loggerProperties/pom.xml
@@ -20,7 +20,7 @@
log4j-samples
org.apache.logging.log4j.samples
- 2.14.1
+ 2.15.0
log4j-samples-loggerProperties
jar
diff --git a/log4j-samples/pom.xml b/log4j-samples/pom.xml
index 3f6264d..26720db 100644
--- a/log4j-samples/pom.xml
+++ b/log4j-samples/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
org.apache.logging.log4j.samples
diff --git a/log4j-slf4j-impl/pom.xml b/log4j-slf4j-impl/pom.xml
index 149e4a5..2331234 100644
--- a/log4j-slf4j-impl/pom.xml
+++ b/log4j-slf4j-impl/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-slf4j-impl
diff --git a/log4j-slf4j18-impl/pom.xml b/log4j-slf4j18-impl/pom.xml
index 6229c2f..a567e85 100644
--- a/log4j-slf4j18-impl/pom.xml
+++ b/log4j-slf4j18-impl/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-slf4j18-impl
diff --git a/log4j-spring-boot/pom.xml b/log4j-spring-boot/pom.xml
index 681b96c..eb6adee 100644
--- a/log4j-spring-boot/pom.xml
+++ b/log4j-spring-boot/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-spring-boot
diff --git a/log4j-spring-cloud-config/log4j-spring-cloud-config-client/pom.xml b/log4j-spring-cloud-config/log4j-spring-cloud-config-client/pom.xml
index a4f0689..d24966a 100644
--- a/log4j-spring-cloud-config/log4j-spring-cloud-config-client/pom.xml
+++ b/log4j-spring-cloud-config/log4j-spring-cloud-config-client/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j-spring-cloud-config
- 2.14.1
+ 2.15.0
../
log4j-spring-cloud-config-client
diff --git a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-application/pom.xml b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-application/pom.xml
index fb4517a..dba328b 100644
--- a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-application/pom.xml
+++ b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-application/pom.xml
@@ -21,7 +21,7 @@
org.apache.logging.log4j.samples
log4j-spring-cloud-config-samples
- 2.14.1
+ 2.15.0
..
diff --git a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/pom.xml b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/pom.xml
index 7e13f68..db29b55 100644
--- a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/pom.xml
+++ b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/pom.xml
@@ -21,7 +21,7 @@
org.apache.logging.log4j.samples
log4j-spring-cloud-config-sample-server
jar
- 2.14.1
+ 2.15.0
Apache Log4j Sample Configuration Service
Sample Cloud Config Server
@@ -289,6 +289,6 @@
- log4j-2.14.1-rc1
+ log4j-2.15.0-rc1
diff --git a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/pom.xml b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/pom.xml
index 2c7f5cc..9aa871f 100644
--- a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/pom.xml
+++ b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j-spring-cloud-config
- 2.14.1
+ 2.15.0
../
org.apache.logging.log4j.samples
diff --git a/log4j-spring-cloud-config/pom.xml b/log4j-spring-cloud-config/pom.xml
index fe28995..414d5f8 100644
--- a/log4j-spring-cloud-config/pom.xml
+++ b/log4j-spring-cloud-config/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
org.apache.logging.log4j
diff --git a/log4j-taglib/pom.xml b/log4j-taglib/pom.xml
index 4ad7927..c3cbdd1 100644
--- a/log4j-taglib/pom.xml
+++ b/log4j-taglib/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-taglib
diff --git a/log4j-to-slf4j/pom.xml b/log4j-to-slf4j/pom.xml
index af24d40..003d58f 100644
--- a/log4j-to-slf4j/pom.xml
+++ b/log4j-to-slf4j/pom.xml
@@ -20,7 +20,7 @@
org.apache.logging.log4j
log4j
- 2.14.1
+ 2.15.0
../
log4j-to-slf4j
diff --git a/log4j-web/pom.xml b/log4j-web/pom.xml
index 85f73eb..d0f301b 100644
--- a/log4j-web/pom.xml
+++ b/log4j-web/pom.xml
@@ -20,7 +20,7 @@
log4j
org.apache.logging.log4j
- 2.14.1
+ 2.15.0
4.0.0
diff --git a/pom.xml b/pom.xml
index 323fbd7..5d4f966 100644
--- a/pom.xml
+++ b/pom.xml
@@ -20,7 +20,7 @@
log4j
pom
Apache Log4j 2
- 2.14.1
+ 2.15.0
org.apache.logging
logging-parent
@@ -174,12 +174,12 @@
scm:git:https://gitbox.apache.org/repos/asf/logging-log4j2.git
scm:git:https://gitbox.apache.org/repos/asf/logging-log4j2.git
https://gitbox.apache.org/repos/asf?p=logging-log4j2.git
- log4j-2.14.1-rc1
+ log4j-2.15.0-rc1
${basedir}
- 2.14.1
+ 2.15.0
Ralph Goers
B3D8E1BA