December 2021 - logback-dev

[JIRA] (LOGBACK-1590) Backport jansi improvement in ConsoleAppender in 1.2.x
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1591) Possibility of vulnerability - registered as CVE-2021-42550
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] Updates for LOGBACK-1594: Treat empty username string as null in SMTPAppenderBase
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

logback / LOGBACK-1594 [Open] Treat empty username string as null in SMTPAppenderBase ============================== Here's what changed in this issue in the last few minutes. This issue has been created This issue is now assigned to you. View or comment on issue using this link https://jira.qos.ch/browse/LOGBACK-1594 ============================== Issue created ------------------------------ Mark created this issue on 17/Dec/21 11:42 AM Summary: Treat empty username string as null in SMTPAppenderBase Issue Type: Bug Assignee: Logback dev list Components: logback-core Created: 17/Dec/21 11:42 AM Priority: Minor Reporter: Mark Description: When configuring an SMTPAppender, an empty username value is treated as valid value. Specifically: {code:java} <appender name="EMAIL" class="ch.qos.logback.classic.net.SMTPAppender"> <username></username> </appender>{code} We use variable substitution, so it would actually be {code:java} <appender name="EMAIL" class="ch.qos.logback.classic.net.SMTPAppender"> <username>${SMTP_USERNAME}</username> </appender>{code} And sometimes we don't actually want to authenticate. It would be nice if empty usernames were handled the same as if it were never specified. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] (LOGBACK-1594) Treat empty username string as null in SMTPAppenderBase
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1591) Possibility of vulnerability - registered as CVE-2021-42550
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1591) Possibility of vulnerability - registered as CVE-2021-42550
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1592) Allow only java: namespace in JNDI lookups
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1592) Allow only java: namespace in JNDI lookups
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1592) Allow only java: namespace in JNDI lookups
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0

[JIRA] (LOGBACK-1591) Possibility of vulnerability - registered as CVE-2021-42550
by QOS.CH (JIRA) 17 Dec '21

17 Dec '21

1 0