- slf4j-dev - mailman3.qos.ch

[JIRA] Updates for SLF4J-491: Deprecate or remove slf4j-log4j12
by QOS.CH (JIRA) 02 Dec '20

02 Dec '20

SLF4J / SLF4J-491 [Open] Deprecate or remove slf4j-log4j12 ============================== Here's what changed in this issue in the last few minutes. There is 1 comment. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-491 ============================== 1 comment ------------------------------ Rade Martinović on 02/Dec/20 11:06 AM How do you feel about this one? Maybe in some free time I could start work with it. Also, I would vote that slf4j-log4j12 module is completely deleted from the source code. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] Updates for SLF4J-502: SLF4J generates error message when multiple static bindings found in classpath
by QOS.CH (JIRA) 02 Dec '20

02 Dec '20

SLF4J / SLF4J-502 [Open] SLF4J generates error message when multiple static bindings found in classpath ============================== Here's what changed in this issue in the last few minutes. There is 1 comment. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-502 ============================== 1 comment ------------------------------ Rade Martinović on 02/Dec/20 10:46 AM I disagree. First of all, this is a warning. Secondly, please read [http://www.slf4j.org/codes.html#multiple_bindings] for the explanation. Even if the package names would have been different, there would be multiple bindings for logger provider. This means that your build is not really clean. If you are using Maven make sure you choose only one binding and exclude the others. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] Updates for SLF4J-494: slf4j introduces the log4j version of 1.2.17. There is a security vulnerability. The security vulnerability CVE numbers are CVE-2019-17571 and CVE-2020-9488. Please fix it.
by QOS.CH (JIRA) 02 Dec '20

02 Dec '20

SLF4J / SLF4J-494 [Open] slf4j introduces the log4j version of 1.2.17. There is a security vulnerability. The security vulnerability CVE numbers are CVE-2019-17571 and CVE-2020-9488. Please fix it. ============================== Here's what changed in this issue in the last few minutes. There is 1 comment. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-494 ============================== 1 comment ------------------------------ Rade Martinović on 02/Dec/20 10:53 AM log4j:log4j:1.2.17 is the latest version released in 2012. I guess log4j 1 should be deprecated in favor of log4j 2. I hope no one is using log4j 1 anymore. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

JDK 16 Early Access build 26 is now available
by Rory O'Donnell 27 Nov '20

27 Nov '20

Hi Ceki, OpenJDK 16 Early Access build 26**is now available at http://jdk.java.net/16 * These early-access , open-source builds are provided under the o GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * Schedule: *JDK 16 Rampdown Phase One Starts on 2020/12/10 [1] * * Features [1]: Most recent Integrations: o Integrated JEP 389: Foreign Linker API (Incubator) <https://openjdk.java.net/jeps/389> with this release. + JEP 389 introduces an API that offers statically-typed, pure-Java access to native code. + This API, together with the JEP 383 <https://openjdk.java.net/jeps/383>, will considerably simplify the otherwise error-prone process of binding to a native library. ** * Release Notes [2] * Changes in recent builds that maybe of interest: o Build 26 + JDK-8202343: *Disable TLS 1.0 and 1.1* + JDK-8251317:**Support for CLDR version 38** + JDK-8212879: Make JVMTI TagMap table concurrent + JDK-8236926: Concurrently uncommit memory in G1 + JDK-8243559: Removed Root Certificates with 1024-bit Keys + JDK-8253459: Argument index of zero or unrepresentable by int throws IllegalFormatException + JDK-8256643: Terminally deprecate ThreadGroup stop, destroy, isDestroyed, setDaemon and isDaemon o Build 25 + JDK-8247781: Day period support added to java.time formats + JDK-8202471: (ann) Cannot read type annotations on generic receiver type's type variables *[**Reported by ByteBuddy]* + JDK-8255947: [macos] Signed macOS jpackage app doesn't filter spurious '-psn' argument *[**Reported by JOSM]* + JDK-8256063: Module::getPackages returns the set of package names in this module * JDK 16 - topics of interest o Inside Java Episode 7 “The Vector API” with John Rose and Paul Sandoz + https://inside.java/2020/11/17/podcast-007/ <https://inside.java/2020/11/17/podcast-007/> o Biased locking Obsoletion update + https://inside.java/2020/11/17/biased-locking-obsoletion/ <https://inside.java/2020/11/17/biased-locking-obsoletion/> * Project Loom with Ron Pressler o https://inside.java/2020/11/24/podcast-008/ * Update on 64-bit ARM Support for Oracle OpenJDK and Oracle JDK o https://inside.java/2020/11/12/arm-support-update/ <https://inside.java/2020/11/12/arm-support-update/> Project Lanai Early-Access: EA 7 Build 16-lanai+3-278 <http://jdk.java.net/lanai/> (2020/11/17) * These early-access builds are provided under the GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html> * These EA builds are produced for the purpose of gathering feedback. Use for any other purpose is at your own risk. * Please send feedback via e-mail to lanai-dev(a)openjdk.java.net <mailto:lanai-dev@openjdk.java.net>. To send e-mail to this address you must first subscribe to the mailing list <https://mail.openjdk.java.net/mailman/listinfo/lanai-dev>. The Java Cryptographic Roadmap has been updated [3]: * Distrust TLS 1.0 and TLS 1.1 by default o TLS protocol versions 1.0 and 1.1 are no longer considered secure and have been superseded by more secure and modern versions (TLS 1.2 and 1.3). This change has been integrated with JDK 16 Early Access build 26. * Upgrade of default algorithms used to encrypt PKCS12 keystores o The new algorithms are based on AES-256 and SHA-256 and are stronger than the old algorithms which were based on RC2, DESede, and SHA-1.This change is already included in JDK 16 Early Access build 23. RgdsRory [1] https://openjdk.java.net/projects/jdk/16/ [2] https://jdk.java.net/16/release-notes [3] https://www.java.com/en/jre-jdk-cryptoroadmap.html -- Rgds, Rory O'Donnell Quality Engineering Manager Oracle EMEA, Dublin, Ireland

1 0

JDK 16 Early Access build 24 is now available
by Rory O'Donnell 13 Nov '20

13 Nov '20

Hi Ceki, OpenJDK 16 Early Access build 24**is now available at http://jdk.java.net/16 * These early-access , open-source builds are provided under the o GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * Schedule 2020/12/10 Rampdown Phase One 2021/01/14 Rampdown Phase Two 2021/02/04 Initial Release Candidate 2021/02/18 Final Release Candidate 2021/03/16 General Availability * Features: o JEPs targeted to JDK 16, so far: + JEP 338: Vector API (Incubator) <https://openjdk.java.net/jeps/338> + JEP 347: Enable C++14 Language Features <https://openjdk.java.net/jeps/347> + JEP 357: Migrate from Mercurial to Git <https://openjdk.java.net/jeps/357> + JEP 369: Migrate to GitHub <https://openjdk.java.net/jeps/369> + JEP 376: ZGC: Concurrent Thread-Stack Processing <https://openjdk.java.net/jeps/376> + JEP 380: Unix-Domain Socket Channels <https://openjdk.java.net/jeps/380> + JEP 386: Alpine Linux Port <https://openjdk.java.net/jeps/386> + JEP 387: Elastic Metaspace <https://openjdk.java.net/jeps/387> + JEP 388: Windows/AArch64 Port <https://openjdk.java.net/jeps/388> + JEP 392: Packaging Tool <https://openjdk.java.net/jeps/392> + JEP 393: Foreign-Memory Access API (Third Incubator) <https://openjdk.java.net/jeps/393> + JEP 394: Pattern Matching for instanceof <https://openjdk.java.net/jeps/394> + JEP 395: Records <https://openjdk.java.net/jeps/395> ** * Release Notes are available at http://jdk.java.net/16/release-notes <http://jdk.java.net/16/release-notes> * Changes in recent builds that maybe of interest: o Build 24 + JDK-8231599: NPE when loading a preview classfile from a future Java version # *Reported by JUnit5* + JDK-8254661: arm32: additional cleanup after fixing SIGSEGV # *Reported by JaCoCo* + JDK-8255584: `HttpPrincipal::getName` returns incorrect name + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d o Build 23 + JDK-8254876: (fs) NullPointerException not thrown when first argument to Path.of or Paths.get is null + JDK-8255576: (fs) Files.isHidden() throws ArrayIndexOutOfBoundsException (unix) # *Reported by JUnit5* + JDK-8255616: Removal of experimental features AOT and Graal JIT o Build 22 + JDK-8243583: Change 'final' error checks to throw ICCE + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c Project Loom Early-Access Build: Build 16-loom+7-285 <http://jdk.java.net/loom/> (2020/11/4) * *Want to know more* - check out - https://inside.java/2020/11/11/project-loom-at-nyc-java-sig/ * These early-access builds are provided under the GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html> o These builds are based on jdk-16+20 <https://github.com/openjdk/jdk/releases/tag/jdk-16%2B20> o These EA builds are produced for the purpose of gathering feedback. Use for any other purpose is at your own risk. o Please send feedback via e-mail to loom-dev(a)openjdk.java.net <mailto:loom-dev@openjdk.java.net>. To send e-mail to this address you must first subscribe to the mailing list <http://mail.openjdk.java.net/mailman/listinfo/loom-dev>. Rgds,Rory -- Rgds, Rory O'Donnell Quality Engineering Manager Oracle EMEA, Dublin, Ireland

1 0

JDK 16 EA build 21 is available
by Rory O'Donnell 23 Oct '20

23 Oct '20

Hi Ceki, OpenJDK 16 Early Access build 21**is now available at http://jdk.java.net/16 * These early-access , open-source builds are provided under the o GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * Schedule (proposed) 2020/12/10 Rampdown Phase One 2021/01/14 Rampdown Phase Two 2021/02/04 Initial Release Candidate 2021/02/18 Final Release Candidate 2021/03/16 General Availability * Features: o JEPs targeted to JDK 16, so far: + JEP 338: Vector API (Incubator) <https://openjdk.java.net/jeps/338> + JEP 347: Enable C++14 Language Features <https://openjdk.java.net/jeps/347> + JEP 357: Migrate from Mercurial to Git <https://openjdk.java.net/jeps/357> + JEP 369: Migrate to GitHub <https://openjdk.java.net/jeps/369> + JEP 376: ZGC: Concurrent Thread-Stack Processing <https://openjdk.java.net/jeps/376> + JEP 386: Alpine Linux Port <https://openjdk.java.net/jeps/386> + JEP 387: Elastic Metaspace <https://openjdk.java.net/jeps/387> + JEP 388: Windows/AArch64 Port <https://openjdk.java.net/jeps/388> ** * Changes in recent builds that maybe of interest: o Build 21 + JDK-8236862: Enhance support of Proxy class + JDK-8237990: Added Property to Control LDAP Authentication Mechanisms Allowed to Authenticate Over Clear Connections + JDK-8242068: Signed JAR support for RSASSA-PSS and EdDSA + JDK-8245417: Improve certificate chain handling + JDK-8253952: Refine ZipOutputStream.putNextEntry() to recalculate ZipEntry's compressed size o Build 20 + JDK-8232092: (fs) Files::isWritable returns false on a writeable root directory (win) # Reported by JUnit5 + JDK-8248262: Wrong link target in ModuleDescriptor#isAutomatic's API documentation # Reported by JUnit5 + JDK-8253965: Delete the outdated java.awt.PeerFixer class + JDK-8253566: clazz.isAssignableFrom will return false for interface implementors # Found by Hibernate Validator + JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b o Build 19 + JDK-8253761: Wrong URI syntax printed by jar --describe-module # Reported by JUnit5 Project Lanai Early-Access Build: EA 6 Build 16-lanai+2-229 <http://jdk.java.net/lanai/> (2020/10/4) * These early-access builds are provided under the GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * These builds are based upon the latest state of the current in development JDK, and so may contain new features and unresolved bugs unrelated to Project Lanai. Project Lanai Wiki: https://wiki.openjdk.java.net/display/lanai/Main * Please send feedback via e-mail tolanai-dev(a)openjdk.java.net <mailto:lanai-dev@openjdk.java.net>. To send e-mail to this address you must firstsubscribe to the mailing list <https://mail.openjdk.java.net/mailman/listinfo/lanai-dev>. Project Panama Early-Access Build: Build 16-panama+2-193 <http://jdk.java.net/panama/> (2020/10/1) * These early-access, open-source builds are provided under the GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * These builds are based on an incomplete version of JDK 16. * Please send feedback via e-mail topanama-dev(a)openjdk.java.net <mailto:panama-dev@openjdk.java.net>. To send e-mail to this address you must firstsubscribe to the mailing list <http://mail.openjdk.java.net/mailman/listinfo/panama-dev>. Oracle JRE and JDK Cryptographic Roadmap has been updated [1] * Oracle has announced plans to add support for x25519 and x448 named elliptic curve groups to TLS. * Support is targeted for JDK 11 with the January 2021 CPU release. Oracle Critical Patch Update released 21-Oct-2020 * https://www.oracle.com/security-alerts/cpuoct2020.html *__* Rgds,Rory [1] https://java.com/en/jre-jdk-cryptoroadmap.html -- Rgds, Rory O'Donnell Quality Engineering Manager Oracle EMEA, Dublin, Ireland

1 0

[JIRA] Updates for SLF4J-503: jul-to-slf4j discards LogRecord parameters[]
by QOS.CH (JIRA) 22 Oct '20

22 Oct '20

SLF4J / SLF4J-503 [Open] jul-to-slf4j discards LogRecord parameters[] ============================== Here's what changed in this issue in the last few minutes. There is 1 comment. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-503 ============================== 1 comment ------------------------------ Max Faul on 22/Oct/20 11:20 AM https://github.com/qos-ch/slf4j/pull/251 ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] Updates for SLF4J-503: jul-to-slf4j discards LogRecord parameters[]
by QOS.CH (JIRA) 22 Oct '20

22 Oct '20

SLF4J / SLF4J-503 [Open] jul-to-slf4j discards LogRecord parameters[] ============================== Here's what changed in this issue in the last few minutes. This issue has been created This issue is now assigned to you. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-503 ============================== Issue created ------------------------------ Max Faul created this issue on 22/Oct/20 11:07 AM Summary: jul-to-slf4j discards LogRecord parameters[] Issue Type: Improvement Affects Versions: 1.7.30 Assignee: SLF4J developers list Components: jul-to-slf4j Created: 22/Oct/20 11:07 AM Priority: Major Reporter: Max Faul Priority: P1 Severity: major Description: The 'parameters' attribute of the java.util.logging.LogRecord is being discarded by jul-to-slf4j. This is used extensively in classes like com.sun.ejb.containers.EJBTimerService and would be nice to have passed through jul-to-slf4j. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] Updates for SLF4J-502: SLF4J generates error message when multiple static bindings found in classpath
by QOS.CH (JIRA) 13 Oct '20

13 Oct '20

SLF4J / SLF4J-502 [Open] SLF4J generates error message when multiple static bindings found in classpath ============================== Here's what changed in this issue in the last few minutes. This issue has been created This issue is now assigned to you. View or comment on issue using this link https://jira.qos.ch/browse/SLF4J-502 ============================== Issue created ------------------------------ B K created this issue on 13/Oct/20 7:27 PM Summary: SLF4J generates error message when multiple static bindings found in classpath Issue Type: Bug Assignee: SLF4J developers list Created: 13/Oct/20 7:27 PM Environment: Maven, Java Priority: Major Reporter: B K Severity: major Description: SLF4J: Class path contains multiple SLF4J bindings. SLF4J: Found binding in [jar:file:/C:/Users/xxxxxx/.m2/repository/org/slf4j/slf4j-log4j12/1.6.1/slf4j-log4j12-1.6.1.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/C:/Users/xxxxxx/.m2/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation. Please stop breaking builds with this. The proper fix is to assign different package names to the conflicting classes. Fix the problem right instead of throwing the problem back into the user's lap. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

JDK 16 EA build 18 is now available
by Rory O'Donnell 02 Oct '20

02 Oct '20

Hi Ceki, OpenJDK 16 Early Access build 18**is now available at http://jdk.java.net/16 * These early-access , open-source builds are provided under the o GNU General Public License, version 2, with the Classpath Exception <http://openjdk.java.net/legal/gplv2+ce.html>. * Features: o JEPs proposed to target JDK 16 + JEP 376: ZGC: Concurrent Thread-Stack Processing <https://openjdk.java.net/jeps/376> + JEP 386: Alpine Linux Port <https://openjdk.java.net/jeps/386> + JEP 388: Windows/AArch64 Port <https://openjdk.java.net/jeps/388> o JEPs targeted to JDK 16, so far: + JEP 338: Vector API (Incubator) <https://openjdk.java.net/jeps/338> + JEP 347: Enable C++14 Language Features <https://openjdk.java.net/jeps/347> + JEP 357: Migrate from Mercurial to Git <https://openjdk.java.net/jeps/357> + JEP 369: Migrate to GitHub <https://openjdk.java.net/jeps/369> + JEP 387: Elastic Metaspace <https://openjdk.java.net/jeps/387> * Release Notes are available at http://jdk.java.net/16/release-notes ** * Changes in recent builds that maybe of interest: o Build 18 + JDK-8235710: Removal of Legacy Elliptic Curves + JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos + JDK-8252739: Deflater.setDictionary(byte[], int off, int len) ignores the starting offset for the dictionary # Reported by Apache Lucene o Build 17 + JDK-8247281: Object monitors no longer keep strong references to their associated object + JDK-8202473: A type variable with multiple bounds does not correctly place type annotation # Reported by ByteBuddy + JDK-8234808: jdb quoted option parsing broken # Reported by Apache Tomcat o Build 16 + JDK-8172366: SUN, SunRsaSign, and SunEC Providers Supports SHA-3 Based Signature Algorithms + JDK-8244706: GZIPOutputStream now sets the GZIP OS Header Field to the correct default value * Quality Report for September 2020 was published here [1]. Thanks to everyone who contributed by creating features or enhancements, logging bugs, or downloading and testing the early-access builds. *__* Rgds,Rory [1] https://wiki.openjdk.java.net/display/quality/Quality+Outreach+report+Septe… -- Rgds, Rory O'Donnell Quality Engineering Manager Oracle EMEA, Dublin, Ireland

1 0