Built by Maven

2.17.1 (2021-12-27)

This release addresses CVE-2021-44832 and contains other minor fixes.

Due to a break in compatibility in the SLF4J binding, Log4j now ships with two versions of the SLF4J to Log4j adapters. log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and log4j-slf4j18-impl should be used with SLF4J 1.8.x and later. SLF4J-2.0.0 alpha releases are not fully supported. See LOG4J2-2975 and SLF4J-511.

The Log4j 2.17.1 API, as well as many core components, maintains binary compatibility with previous releases.

Apache Log4j 2.17.1 requires a minimum of Java 8 to build and run. Log4j 2.12.2 is the last release to support Java 7. Java 7 is no longer supported by the Log4j team.

For complete information on Apache Log4j 2, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Log4j 2 website.

Changes

Fixed

  • Fix NPE when input is null in StrSubstitutor.replace(String, Properties). (for by Gary Gregory)

  • Correct SpringLookup package name in Interpolator. (for LOG4J2-3204 by Volkan Yazıcı, Francis-FY)

  • Reduce ignored package scope of KafkaAppender. (for LOG4J2-3256 by Gary Gregory, Lee Dongjin)

  • Fix MapLookup to lookup MapMessage before DefaultMap (for LOG4J2-3264 by Carter Kozak, Yanming Zhou)

  • Lookups with no prefix only read values from the configuration properties as expected. (for LOG4J2-3270 by Carter Kozak)

  • Buffered I/O checked had inverted logic in RollingFileAppenderBuilder. (for LOG4J2-3274 by Ralph Goers, Faisal Khan Thayub Khan)

  • log4j-to-slf4j takes the provided MessageFactory into account (for LOG4J2-3284 by Carter Kozak, Michael Vorburger)

  • log4j-to-slf4j no longer re-interpolates formatted message contents. (for LOG4J2-3289 by Carter Kozak)

  • Remove unused method. (for LOG4J2-3290 by Ralph Goers)

  • ExtendedLoggerWrapper.logMessage no longer double-logs when location is requested. (for LOG4J2-3292 by Carter Kozak)

  • JdbcAppender now uses JndiManager to access JNDI resources. JNDI is only enabled when system property log4j2.enableJndiJdbc is set to true. (for LOG4J2-3293 by Gary Gregory)