[官网]Apache Log4j2 最新版安全提示 2.17.0
https://logging.apache.org/log4j/2.x/ 最近一个周的时间 log4j2 从 2.14 跃升到了2.17 还在不停的升级 安全问题正是焦头烂额 free software 和 opensource 的实质 其实是 自有 而不是 免费. 大家都把free 理解成了免费, 导致现在所有的开源软件 大家都缺少动力. 很多时候 爱好也重要. 但是吃饭更重要.
Apache Log4j 2
Apache Log4j 2 is an upgrade to Log4j that provides significant improvements over its predecessor, Log4j 1.x, and provides many of the improvements available in Logback while fixing some inherent problems in Logback’s architecture.
Security page for details and mitigation measures for older versions of Log4j.
Security page for details and mitigation measures for older versions of Log4j.
Security page for mitigation measures for older versions of Log4j.
Messages instead of just Strings. 2. The Log4j API supports lambda expressions. 3. The Log4j API provides many more logging methods than SLF4J. 4. In addition to the “parameterized logging” format supported by SLF4J, the Log4j API also supports events using the java.text.MessageFormat syntax as well printf-style messages. 5. The Log4j API provides a LogManager.shutdown() method. The underlying logging implementation must implement the Terminable interface for the method to have effect. 6. Other constructs such as Markers, log Levels, and ThreadContext (aka MDC) are fully supported.
Asynchronous Logging Performance for details. Otherwise, Log4j 2 significantly outperforms Log4j 1.x, Logback and java.util.logging, especially in multi-threaded applications. See Performance for more information.
Lookup Plugin.
lambda support. Since Log4j will not evaluate a lambda expression if the requested log level is not enabled, the same effect can be achieved with less code.
custom log levels can easily be defined in code or in configuration. No subclassing is required.
garbage-free in stand-alone applications, and low garbage in web applications. This reduces pressure on the garbage collector and can give better response time performance.
Logging in the Cloud for details.
Log4j 2 Compatiblity with Log4j 1 for more information.
site or as a downloadable PDF.
changes report.
Lookup Plugin.
lambda support. Since Log4j will not evaluate a lambda expression if the requested log level is not enabled, the same effect can be achieved with less code.
custom log levels can easily be defined in code or in configuration. No subclassing is required.
garbage-free in stand-alone applications, and low garbage in web applications. This reduces pressure on the garbage collector and can give better response time performance.
Logging in the Cloud for details.
Log4j 2 Compatiblity with Log4j 1 for more information.
site or as a downloadable PDF.
changes report.
custom log levels can easily be defined in code or in configuration. No subclassing is required.
garbage-free in stand-alone applications, and low garbage in web applications. This reduces pressure on the garbage collector and can give better response time performance.
Logging in the Cloud for details.
Log4j 2 Compatiblity with Log4j 1 for more information.
site or as a downloadable PDF.
changes report.
Logging in the Cloud for details.
Log4j 2 Compatiblity with Log4j 1 for more information.
site or as a downloadable PDF.
changes report.
site or as a downloadable PDF.
changes report.
Log4j 2.17.0 maintains binary compatibility with previous releases.