)]}' { "log": [ { "commit": "d289b0481674efec4919d9e7ab2236ee13082f14", "tree": "88337a7ded41fc4728cddb7152024b1003e8c271", "parents": [ "f8800625ae83ada2172fe4dbd4a6e8f515a1d9bf" ], "author": { "name": "Jan Friedrich", "email": "43271715+FreeAndNil@users.noreply.github.com", "time": "Fri Apr 17 11:23:15 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 17 11:23:15 2026 +0200" }, "message": " Add CVE-2018-1285 to VDR (#25)\n\nAdds vulnerability disclosure record for CVE-2018-1285 (Apache Log4net XXE vulnerability) to the CycloneDX VDR." }, { "commit": "f8800625ae83ada2172fe4dbd4a6e8f515a1d9bf", "tree": "e570d410fbbcf7786a5cf6cb5967e739d65c4c87", "parents": [ "bafaa2f10f049c91259cb481730e085726593322" ], "author": { "name": "Jan Friedrich", "email": "43271715+FreeAndNil@users.noreply.github.com", "time": "Fri Apr 17 10:18:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 17 10:18:09 2026 +0200" }, "message": "Add CVE-2018-1285 (log4net XXE via config file) to vulnerabilities page (#24)\n\nAdds an entry for CVE-2018-1285, an XXE vulnerability in log4net versions\nbefore 2.0.10 affecting applications that accept attacker-controlled\nconfiguration files. Includes a threat model note explaining why this is\nno longer considered a vulnerability under the current threat model." }, { "commit": "bafaa2f10f049c91259cb481730e085726593322", "tree": "c8eb86d7c415c5d2f18458358b0d30fc76e9f586", "parents": [ "5b84615bcd0b584ea4a9d1edc6c29017e968d970" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 10 16:29:21 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 10 16:29:21 2026 +0200" }, "message": "Add CVEs for the 2026-04 releases (#22)\n\n* Add entries for additional products to `vdr.xml`\n\n* fix: typos in _vulnerabilities.adoc\n\n* Add details for CVE-2026-34477\n\n* Add details for CVE-2026-34478\n\n* Add details for CVE-2026-34479\n\n* Add details for CVE-2026-34480\n\n* Add details for CVE-2026-34481\n\n* Add details for CVE-2026-40021\n\n* Add details for CVE-2026-40023\n\n* Add Conan to old Log4cxx CVEs\n\n* Fix other typos\n\n* Fix to CVE-2025-68161 description\n\nCo-authored-by: Copilot Autofix powered by AI \u003c175728472+Copilot@users.noreply.github.com\u003e\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI \u003c175728472+Copilot@users.noreply.github.com\u003e" }, { "commit": "5b84615bcd0b584ea4a9d1edc6c29017e968d970", "tree": "8aa1467a29d258f5c37753b8f29399c3dddd0a70", "parents": [ "98e7ad2f3ee428625632e21fc966f21678a43b31" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Mar 25 20:39:29 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 25 20:39:29 2026 +0100" }, "message": "Add Security FAQ (#21)\n\n* Add Security FAQ\n\nAdds a Security FAQ documenting behaviors that are frequently reported as vulnerabilities but fall outside our threat model.\n\nThis serves two purposes:\n\n- **User guidance**: share clear recommendations on security considerations when using certain formats and protocols.\n- **Triage efficiency**: reduce duplicate reports and provide well-reasoned, consistent responses to those that do come in.\n\n* fix: add Path Traversal section\n\nAdds a section on path traversal.\n\nCo-authored-by: Jan Friedrich \u003c43271715+FreeAndNil@users.noreply.github.com\u003e" }, { "commit": "98e7ad2f3ee428625632e21fc966f21678a43b31", "tree": "29b625cb2bceb9c7b62fa637412c87711001892f", "parents": [ "6e9a77cec32b45c558362bc87fec806e26fe4819" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Jan 22 10:57:12 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 22 10:57:12 2026 +0100" }, "message": "Retire Log4j Scala (#20)\n\n" }, { "commit": "6e9a77cec32b45c558362bc87fec806e26fe4819", "tree": "077a4fd2fe0f6aef21ddfa53914762531a69a168", "parents": [ "c14079f2e637e35abfdaf63a0172e2f8dfcfc6aa" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Fri Jan 09 16:13:48 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 09 16:13:48 2026 +0100" }, "message": "Remove redundant `target-path` in `deploy-site.yaml` (#19)\n\n" }, { "commit": "c14079f2e637e35abfdaf63a0172e2f8dfcfc6aa", "tree": "52b7198253fcea199fa0758be59c81f38e2fa70c", "parents": [ "c4cb3228dd3903f70bc5c17e02fe61f3ac2a9b63" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Fri Jan 09 15:45:01 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 09 15:45:01 2026 +0100" }, "message": "Fix `deploy-site.yaml` as suggested by @Humbedooh[1] (#18)\n\n[1] https://the-asf.slack.com/archives/CBX4TSBQ8/p1767880006535609?thread_ts\u003d1767877560.723049\u0026cid\u003dCBX4TSBQ8" }, { "commit": "c4cb3228dd3903f70bc5c17e02fe61f3ac2a9b63", "tree": "22137f068ea7b63dc5b1c5094b9e68cf4d87db0b", "parents": [ "bcbe66cae1e7b5a2d857bce3c161d0400901f991" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Fri Jan 09 15:44:53 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 09 15:44:53 2026 +0100" }, "message": "Use the `Apache` prefix consistently in prose (#17)\n\n" }, { "commit": "bcbe66cae1e7b5a2d857bce3c161d0400901f991", "tree": "ad2637dd662feb4d8ce4743b56e88b33294e66bb", "parents": [ "45e3a7a3c154a5c221dac6109f1a90f9b87b20ea" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Wed Dec 31 12:15:33 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Dec 31 12:15:33 2025 +0100" }, "message": "Set `target-path` to `content` in `deploy-site.yaml` (#16)\n\n" }, { "commit": "45e3a7a3c154a5c221dac6109f1a90f9b87b20ea", "tree": "79d640e39db65c3aa13b69f20363f13d5d894ef9", "parents": [ "fee7e57c6268944b7992758985903632f0303490" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Dec 30 20:52:14 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Dec 30 20:52:14 2025 +0100" }, "message": "Remove `update-stats.yaml` (#15)\n\n" }, { "commit": "fee7e57c6268944b7992758985903632f0303490", "tree": "2c3370fc14611abae61914223230e0a2fc82e1e9", "parents": [ "9e1295df1af1991d8c5aa9c8122f1375bd2079e2" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Dec 30 19:20:51 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Dec 30 19:20:51 2025 +0100" }, "message": "Migrate project to Antora (#14)\n\n" }, { "commit": "9e1295df1af1991d8c5aa9c8122f1375bd2079e2", "tree": "1bbc2d40877cc1524238acaff5cb05c27ae77b4c", "parents": [ "f366483b97f55af4360f0a95c1b650f4abea5c3f" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Thu Dec 18 17:56:28 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Thu Dec 18 17:56:28 2025 +0100" }, "message": "docs: add CVE-2025-68161 details\n\nDocument the lack of host name verification in Socket Appender.\n" }, { "commit": "f366483b97f55af4360f0a95c1b650f4abea5c3f", "tree": "e4552ef9acbac1c1e6d7bc488116b28732bfaf53", "parents": [ "7ec065038d94b445d03633cd6d7a409f4acc8169" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Aug 27 19:31:28 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Aug 27 19:31:28 2025 +0200" }, "message": "Fix copy/paste error\n" }, { "commit": "7ec065038d94b445d03633cd6d7a409f4acc8169", "tree": "be4f28acd5bf007e079b876f211d77ee36bf65c2", "parents": [ "dddf1b922ef9d5bcd67a09e2a3adeb54811ad35b" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 09:58:00 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 10:02:02 2025 +0200" }, "message": "docs: add CVE-2025-54813 details\n\nDocument the improper escaping of special elements in\n`JSONLayout` in Apache Log4cxx.\n" }, { "commit": "dddf1b922ef9d5bcd67a09e2a3adeb54811ad35b", "tree": "b0c56fe7d9a1e1b8fc3a8a20dfe16f1846678406", "parents": [ "5950fea980c83d8c30686486df0d7cb92d21f246" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 09:41:33 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 10:01:53 2025 +0200" }, "message": "docs: add CVE-2025-54812 details\n\nDocument the improper escaping of special elements in\n`HTMLLayout` in Apache Log4cxx.\n" }, { "commit": "5950fea980c83d8c30686486df0d7cb92d21f246", "tree": "aed046b2c99dfa97f01e7a371ff0b8ac635fd4cc", "parents": [ "08090d7b474a7203c376c0efe7af651f08be4fce" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 08:46:40 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 08:46:40 2025 +0200" }, "message": "docs: use level-1 headers in _vulnerabilities.adoc\n\nUse level-1 headers in `_vulnerabilities.adoc` together with\n`leveloffset` in the including file. This eliminates IDE warnings\nwhen editing `_vulnerabilities.adoc`.\n" }, { "commit": "08090d7b474a7203c376c0efe7af651f08be4fce", "tree": "f84ef9c0a6997863dc541b9d3d1446f00d032615", "parents": [ "c5fca4e43ddb1cba88c18be8ff4f02df8f395fe7" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 08:18:33 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "chore: relocate `vdr.xml` to `main` branch\n\nMove `vdr.xml` to the `main` branch to simplify the website\u0027s branch\nstructure and reduce maintenance overhead.\n" }, { "commit": "c5fca4e43ddb1cba88c18be8ff4f02df8f395fe7", "tree": "bc96be53f32aac5b873d2ca48b8093a4ad6fc94b", "parents": [ "74e7b0a90a33b35339d0b816caf35846962b17ac" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 22 08:07:18 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Proofread CVE fix versions in `vdr.xml` (#7)\n\n* feat: proofread CVE fix versions in `vdr.xml`\n\n- Updated `vdr.xml` to align with the proofread versioning details\n from PR #7.\n- Introduced a `\u003cmetadata\u003e` element to record contact information\n for the Apache Logging Services PMC and Security Team, as well as\n the timestamp of the last modification.\n- Refreshed the `\u003cupdated\u003e` timestamps in all modified `\u003cvulnerability\u003e` entries.\n- Added inline comment with instructions on how to properly\n update and maintain the VDR file.\n\n* fix: restore original update date for CVE-2021-45105\n\n* fix: update contact information\n\nUpdate the contact information based on review feedback." }, { "commit": "74e7b0a90a33b35339d0b816caf35846962b17ac", "tree": "ed3a041e44ab347016f9b9f6ed9264a15d31922a", "parents": [ "f827651b615882657218af6b654d766c2ffdd5cb" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sun Aug 17 14:07:32 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "feat: move `2.xml` to `vdr.xml`\n\n- Restores version 2 of the VDR as `vdr.xml`, making it easier\n to compare changes against version 1.\n- This commit can be tagged as `vdr-2` for future reference.\n" }, { "commit": "f827651b615882657218af6b654d766c2ffdd5cb", "tree": "b3b9c77db893dd6e6817f3a74fff124b847db65b", "parents": [ "b94dbbc980b91c4425a3acc738b415db18c96d6d" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sun Aug 17 14:04:39 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "feat: move `1.xml` to `vdr.xml`\n\n- Restores version 1 of the VDR as `vdr.xml`, reverting\n the complex structure introduced in commit\n 620e96c26114ae8efbe41daa0bcb2ccd70f31a93.\n- This commit can be tagged as `vdr-1` for reference.\n" }, { "commit": "b94dbbc980b91c4425a3acc738b415db18c96d6d", "tree": "750461069ded0a2fdce9c04689b4631ffee9c6f2", "parents": [ "82514d02946c3a4812ad9b6a7389ef22c72e6b15" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sun Aug 17 13:58:28 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "feat: remove old BOM Exchange API links\n\n- Removed URL references related to the abandoned\n [BOM Exchange API proposal](https://github.com/CycloneDX/transparency-exchange-api/tree/bomexchangeapi),\n which was never accepted.\n- Our SBOMs have always only referenced `/cyclonedx/vdr.xml`,\n so these links were unused and unnecessary.\n\nThis cleanup simplifies the website structure and ensures we can take fuller advantage of version control.\n" }, { "commit": "82514d02946c3a4812ad9b6a7389ef22c72e6b15", "tree": "553a974302f6bf5995e1187610b7adc25643381d", "parents": [ "d4dad41f603152eee441463cb5ef07d481a0c317" ], "author": { "name": "Arnout Engelen", "email": "arnout@bzzt.net", "time": "Thu Nov 30 12:42:31 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Remove sbomlink reference, add maintenance links\n\nthe sbomlink/serialNumber is no longer used since\ncommit 9f28f38ffe5143e7a163690f8f0c809c0aa60e87 of logging-parent\n" }, { "commit": "d4dad41f603152eee441463cb5ef07d481a0c317", "tree": "9817b45dc2216cbc1708e932f8717991c6709ea0", "parents": [ "9414b17329f6a9b57c37f1a98aef4b6799b11bf4" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Nov 09 16:22:57 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Add `cpe` and `purl` to `log4j-core` component (apache/logging-log4j2#1707)\n" }, { "commit": "9414b17329f6a9b57c37f1a98aef4b6799b11bf4", "tree": "886a506143d625c975a02c5cc2465276841b1240", "parents": [ "4ffe4834e340190ab5dcf12da14eafae3688add0" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Wed Nov 08 17:20:19 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Fix CVE-2020-9488 IDs\n" }, { "commit": "4ffe4834e340190ab5dcf12da14eafae3688add0", "tree": "5f5b6fea66a1d88c6370c55b655d8ab2e3838373", "parents": [ "bff676cc944e148ecfcd13a72986ba56572b3f7b" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Nov 08 10:11:59 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Add support for SBOM versioning\n" }, { "commit": "bff676cc944e148ecfcd13a72986ba56572b3f7b", "tree": "084ae88b6461b1e220d59dc5e344e431467e5414", "parents": [ "4697418a08b15d6dc8d1519b2f1faef69940ec16" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Nov 08 09:54:46 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Emulate current BOM Exchange API\n" }, { "commit": "4697418a08b15d6dc8d1519b2f1faef69940ec16", "tree": "0db36351914e32955a257061241eb1dfa5699b76", "parents": [ "3737e37818a3a1de467f374ef4ae96060034633e" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Wed Nov 08 09:45:52 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Switch to CVSSv2 for CVE-2017-5645 (apache/logging-log4j2#1707)\n" }, { "commit": "3737e37818a3a1de467f374ef4ae96060034633e", "tree": "cda325a18c9b9a075e69b3dc803e9868d1cd6f91", "parents": [ "3838951fcfb68d41fa074c2f77040f6a8bafe2fa" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Nov 08 09:34:47 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Add symbolic links\n" }, { "commit": "3838951fcfb68d41fa074c2f77040f6a8bafe2fa", "tree": "aade7bcdac45d70302d48a61b85bd4de5e4f5d17", "parents": [ "ed177e21c19a52594fcde6e0aa0a60521e96a0b7" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Wed Nov 08 09:12:11 2023 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Aug 22 08:24:58 2025 +0200" }, "message": "Initial VDR (apache/logging-log4j2#1707)\n" }, { "commit": "ed177e21c19a52594fcde6e0aa0a60521e96a0b7", "tree": "4cd2fef11da466f6386f1e5ffec0a51496d500bf", "parents": [ "fef16333e09cb4c70ef7154d720c918bfff100bb" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sun Aug 17 13:04:56 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 17 13:04:56 2025 +0200" }, "message": "Proofread CVE fix versions (#6)\n\nFor the `2.3.x` branch:\n\n**CVE-2017-5645** (server class) was never fixed, the TCP/UDP socket server is still there.\n\n**CVE-2020-9488** (host name validation) was fixed in `2.3.2`:\n\n- 3c62f0bea692456b1b5039d3bcc1c3e0ba65146a\n\n**CVE-2021-44228** (Log4Shell) was fixed in `2.3.1`:\n\n- be848dacbac6df30c4f32b2852e24446033ecf79\n- f6564bb993d547d0a371b75d869042c334bf57f0\n\n**CVE-2021-45046** (Log4Shell through recursive lookup evaluation) was fixed in `2.3.1`:\n\n- f6564bb993d547d0a371b75d869042c334bf57f0\n\n**CVE-2021-45105** (DoS through recursive lookup evaluation) was fixed in `2.3.1`:\n\n- ce6b78d082aae89089cb3ad25cdd46e9ec70a70b\n\n**CVE-2021-44832** (RCE if you have access to configuration) was fixed in `2.3.1`:\n\n- f6564bb993d547d0a371b75d869042c334bf57f0\n\n* Proofread CVE fix versions for `2.12.x` branch\n\nFor the `2.12.x` branch:\n\n**CVE-2020-9488** (host name validation) was fixed in `2.12.3`:\n\n- 2bcba12b185200b7f3f2532cbfeff1e1da0d5c81\n- bb94ea9fa921a61f90b6a934600567e719419ddd\n\n**CVE-2021-44228** (Log4Shell) was fixed in `2.12.2`:\n\n- 70edc233343815d5efa043b54294a6fb065aa1c5\n- f819c83804152cb6ed94cb408302e36b21b65053\n\n**CVE-2021-45046** (Log4Shell through recursive lookup evaluation) was fixed in `2.12.3`:\n\n- bf8ba18f63ab9f9ffd54387c5c527ecc7a681037\n\n**CVE-2021-45105** (DoS through recursive lookup evaluation) was fixed in `2.12.3`:\n\n- bf7e916df6335713fe2219c7b3b523fb509deabc\n\n**CVE-2021-44832** (RCE if you have access to configuration) was fixed in `2.12.3`:\n\n- bf8ba18f63ab9f9ffd54387c5c527ecc7a681037\n\n**Note**: Unless I am mistaken, version `2.12.4` didn\u0027t contain any security updates.\n\n* Proofread CVE fix versions for `2.x` branch\n\nFor the `2.x` branch:\n\n**CVE-2021-44228** (Log4Shell) was fixed in `2.15.0`:\n\n- c77b3cb39312b83b053d23a2158b99ac7de44dd3\n- 001aaada7dab82c3c09cde5f8e14245dc9d8b454\n\n**CVE-2021-45046** (Log4Shell through recursive lookup evaluation) was fixed in `2.16.0`:\n\n- c362aff473e9812798ff8f25f30a2619996605d5\n- 27972043b76c9645476f561c5adc483dec6d3f5d\n\n**CVE-2021-45105** (DoS through recursive lookup evaluation) was fixed in `2.12.3`:\n\n- 806023265f8c905b2dd1d81fd2458f64b2ea0b5e\n\n**CVE-2021-44832** (RCE if you have access to configuration) was fixed in `2.12.3`:\n\n- 95b24f77e77e4f1e5cc794df5332643e944fd6f8\n\n**Note**: Unless I am mistaken, version `2.17.1` didn\u0027t contain any security updates." }, { "commit": "fef16333e09cb4c70ef7154d720c918bfff100bb", "tree": "da6293530b0bdd61e8d21796cde3f86f125e538e", "parents": [ "25acddf6a20c1c86296214dbe1afba943f433ddf" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Aug 13 15:09:42 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 15 16:44:59 2025 +0200" }, "message": "fix: mangling -\u003e tampering\n" }, { "commit": "25acddf6a20c1c86296214dbe1afba943f433ddf", "tree": "92c62f0ebb9ef768850bbafc76e83f4a7afb5cd4", "parents": [ "615d7678fc687eb7386754dc9a9246bd3c1891a6" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Aug 13 15:05:52 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 15 16:44:59 2025 +0200" }, "message": "fix: improve trusted sources\n" }, { "commit": "615d7678fc687eb7386754dc9a9246bd3c1891a6", "tree": "a98a7315297a69d464f1ac03aee732666c96de62", "parents": [ "f76bab765ce3835c313d174141f8681ab3c2514c" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Aug 13 14:54:00 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 15 16:44:58 2025 +0200" }, "message": "fix: improve introduction\n" }, { "commit": "f76bab765ce3835c313d174141f8681ab3c2514c", "tree": "df471448ae36591506148e56f10f8ec28410db57", "parents": [ "3a01bb3e38ab513a9f7819794ff5350bb230008c" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Aug 13 14:55:14 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 15 16:44:58 2025 +0200" }, "message": "Apply suggestions from code review\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "3a01bb3e38ab513a9f7819794ff5350bb230008c", "tree": "3def1358e44b859ec07241e35e42742f31729d26", "parents": [ "d48a31e575b6a4992d9ad8649a323f2759af1d9a" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Mar 19 12:52:28 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Aug 15 16:44:58 2025 +0200" }, "message": "Improves Threat Model\n\nIn this PR, we expand our threat model to cover:\n\n- A better definition of the users we trust and those we don\u0027t.\n- A list of resources that untrusted users should not control.\n- A clear list of threats (with an example CWE) and whether Apache Logging Services considers that threat a vulnerability. You can appeal to the pope if you want, `PatternLayout` will never be anything else than a glorified `printf`.\n" }, { "commit": "d48a31e575b6a4992d9ad8649a323f2759af1d9a", "tree": "2ff5fefb26ade2a9873ccf01a02fd3dce90135e5", "parents": [ "4f08288de8acd33d8dbde5ec9aac3390386f04ec" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Jul 28 20:06:57 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 28 20:06:57 2025 +0200" }, "message": "feat(blog): Add post on VEX files and the new VEX Initiative (#11)\n\nThis commit adds a new blog post titled **“How I Learned to Stop Worrying and Love the VEX.”**\n\nThe post explains:\n\n* The role of **VEX files** (Vulnerability Exploitability eXchange) in managing dependency security.\n* Why the Log4j project initially chose not to publish a VEX, and what changed.\n* Lessons learned from helping other projects like Kafka.\n* The launch of the **Alpha-Omega–funded VEX Initiative**, aiming to automate and improve VEX generation across Apache projects, starting with Solr." }, { "commit": "4f08288de8acd33d8dbde5ec9aac3390386f04ec", "tree": "f6a6eba133163edc54038c48fd0e2894c5190618", "parents": [ "f0d94e9c368723df6ae81871f0f67836174f8430" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Mar 28 20:18:43 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Mar 28 20:18:43 2025 +0100" }, "message": "Fix alphabetic order\n" }, { "commit": "f0d94e9c368723df6ae81871f0f67836174f8430", "tree": "6cc6faa1d42d6442b3c52ba56460930f93fa971f", "parents": [ "a521a2e414262b90153d2f51681f7e307e8ab12a" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Mar 28 20:14:43 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Mar 28 20:14:50 2025 +0100" }, "message": "Add Davyd and update Sponsor links\n" }, { "commit": "a521a2e414262b90153d2f51681f7e307e8ab12a", "tree": "c9d96c899e32e08770ee79afed0bf9b96412fc66", "parents": [ "ea24a8452c19b53b8e4bf3f470d4ff68405f7972" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Mar 19 10:50:12 2025 +0100" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Mar 19 12:44:45 2025 +0100" }, "message": "Bump Jekyll to 4.4.1\n" }, { "commit": "ea24a8452c19b53b8e4bf3f470d4ff68405f7972", "tree": "b582e9b6d0ee4750fefd9500314da7cb3f1e370c", "parents": [ "44638b240506794290ee8880845145747c6b80c2" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Mar 19 07:55:46 2025 +0100" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Mar 19 12:44:45 2025 +0100" }, "message": "Upgrade Jekyll docker file\n\nThis change upgrades Jekyll\u0027s docker file, since the old images are no longer available.\n" }, { "commit": "44638b240506794290ee8880845145747c6b80c2", "tree": "330f7eb47f236ea30a35ae426e1b73acd3a31243", "parents": [ "50c7bd889fc900faccd628fdbab1adf3c186c97c" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Mar 19 08:19:05 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Mar 19 08:19:54 2025 +0100" }, "message": "Fix header comments\n" }, { "commit": "50c7bd889fc900faccd628fdbab1adf3c186c97c", "tree": "896bfed191df1efb48b037b4bd42f1d7d3799c67", "parents": [ "b55447937527f714a8db927de4792978b350b758" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Tue Mar 18 14:50:27 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 18 14:50:27 2025 +0100" }, "message": "fixd broken additional statements" }, { "commit": "b55447937527f714a8db927de4792978b350b758", "tree": "65f4f11504429696859cabccaac8d68ac39d714f", "parents": [ "ec36b465611e0509acad4e894d87cc79387334b0" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Tue Mar 18 09:01:30 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Tue Mar 18 09:01:30 2025 +0100" }, "message": "Welcome Jeff!\n" }, { "commit": "ec36b465611e0509acad4e894d87cc79387334b0", "tree": "260737de6c719136e9f3506d2f21b7c37dd5f340", "parents": [ "011db4c8cb6a1048ec7f6905dac7547cd74ac8ee" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Mar 17 13:19:40 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Mar 17 13:19:40 2025 +0100" }, "message": "Remove illegal Jekyll option\n" }, { "commit": "011db4c8cb6a1048ec7f6905dac7547cd74ac8ee", "tree": "300f934d87fa9d24e08a4187f7ac1571d24506d4", "parents": [ "d2f96a4b4879a88639a605f3d7f5f6cc82c53256" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Mar 17 13:09:35 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Mar 17 13:10:42 2025 +0100" }, "message": "Fix links in DOAP file\n" }, { "commit": "d2f96a4b4879a88639a605f3d7f5f6cc82c53256", "tree": "743246fdcf986e868ae231331bd6a67455e91f59", "parents": [ "5d476dabeae5d553766446e65b8a8a6fa095d1a2" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Mon Feb 03 12:22:12 2025 +0100" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Mon Feb 03 12:22:12 2025 +0100" }, "message": "Update actions in `update-stats.yaml`\n\nThis fixes workflow run failures due to backward\nincompatible deprecations[1] by GitHub.\n\n[1] https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions\n" }, { "commit": "5d476dabeae5d553766446e65b8a8a6fa095d1a2", "tree": "39a9c7c97ef6203f780e17234d277e016d0e425d", "parents": [ "dd082d463fa83ed8853d409f870040cfcf8e9eac" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Tue Jan 28 17:05:31 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Tue Jan 28 17:05:31 2025 +0100" }, "message": "Welcome Jay!\n" }, { "commit": "dd082d463fa83ed8853d409f870040cfcf8e9eac", "tree": "8cf6314de177f37e261a774bd28a3abfce89902d", "parents": [ "19e0c48bb7dc02cce1ec6e11b8d2f5df4061160e" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Dec 05 20:00:10 2024 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Dec 05 20:00:10 2024 +0100" }, "message": "Revert \"Fix DID address\"\n\nThis reverts commit 19e0c48bb7dc02cce1ec6e11b8d2f5df4061160e.\n" }, { "commit": "19e0c48bb7dc02cce1ec6e11b8d2f5df4061160e", "tree": "4b8bb66fe3d4d3a6f22b4471551958e1afd2ecdc", "parents": [ "3f325a43ed9739afa1158df6b78d04118e015538" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Dec 05 19:55:00 2024 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Dec 05 19:55:00 2024 +0100" }, "message": "Fix DID address\n" }, { "commit": "3f325a43ed9739afa1158df6b78d04118e015538", "tree": "8cf6314de177f37e261a774bd28a3abfce89902d", "parents": [ "5132aac22dd7efd0817f6277ccba8ad55c37b764" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Dec 02 00:03:21 2024 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Mon Dec 02 00:03:21 2024 +0100" }, "message": "Force inclusion of `.well-known`\n" }, { "commit": "5132aac22dd7efd0817f6277ccba8ad55c37b764", "tree": "42ccae0bd97c99f5b1d867b500b51dbeafee69ad", "parents": [ "5b3a2c931533d9142738022fba22ab2f3fb8dc52" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Sun Dec 01 23:49:02 2024 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Sun Dec 01 23:49:02 2024 +0100" }, "message": "Add AT protocol well-known endpoint\n" }, { "commit": "5b3a2c931533d9142738022fba22ab2f3fb8dc52", "tree": "f6123d9f2564d4ca9b44b6d81e0603349700306f", "parents": [ "6c98a1a5d01c84206a1d19b2b02e8a32fd85c81b" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Oct 17 10:29:09 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Oct 17 10:29:09 2024 +0200" }, "message": "Clarify the policy for not project-specific support inquiries (apache/logging-log4j2#3098)\n" }, { "commit": "6c98a1a5d01c84206a1d19b2b02e8a32fd85c81b", "tree": "9a5f7d09a4aef19fb44f985bc46e5956dca2c69d", "parents": [ "8911b7b864180e6ab15ad7b1a74bbb938cb7e8e4" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Oct 17 10:00:47 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Oct 17 10:00:47 2024 +0200" }, "message": "Improve release verification instructions (apache/logging-log4j2#3099)\n" }, { "commit": "8911b7b864180e6ab15ad7b1a74bbb938cb7e8e4", "tree": "985da1af04c8cf0f50c827989a4623bba7d54d1d", "parents": [ "2f4db06357356414a16e80291970fc946fffba31" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Oct 10 20:26:17 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Oct 10 20:26:17 2024 +0200" }, "message": "corrected flume url\n" }, { "commit": "2f4db06357356414a16e80291970fc946fffba31", "tree": "e2e0944c8ee6972ceeff4f60141fe440bf150e42", "parents": [ "618fbb254bc0525d3181510b125aeaafb0f74ecc" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Oct 10 12:46:42 2024 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 10 12:46:42 2024 +0200" }, "message": "moved flume to dormant\n\nVote: https://lists.apache.org/thread/qqg086c37xdgld4qnhmr405tgrj1r910" }, { "commit": "618fbb254bc0525d3181510b125aeaafb0f74ecc", "tree": "bfcc41e187ac3463efa2fa4c284a6b158e499786", "parents": [ "0822cf96ddec9d341bb8eacf4f4d7bf45048637e" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Mon Sep 02 22:24:29 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Mon Sep 02 22:24:29 2024 +0200" }, "message": "Change the NuGet organization\n" }, { "commit": "0822cf96ddec9d341bb8eacf4f4d7bf45048637e", "tree": "b6c0cf141a5af78d01688fd81044415dc701fac7", "parents": [ "40ddf4dd629e81228063374e20510676b16b615e" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Aug 29 13:11:37 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Aug 29 13:12:00 2024 +0200" }, "message": "Add `log4j-plugins-0.1.0.adoc` schema\n" }, { "commit": "40ddf4dd629e81228063374e20510676b16b615e", "tree": "4cd0f43617572e3300afa1d4db9a3bd2dccd85d2", "parents": [ "392127be1ebeefed644ec2bb822e05ea6c54aed0" ], "author": { "name": "Jan Friedrich", "email": "43271715+FreeAndNil@users.noreply.github.com", "time": "Wed Aug 28 10:39:09 2024 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 28 10:39:09 2024 +0200" }, "message": "separated log4net threat model (#4)\n\n" }, { "commit": "392127be1ebeefed644ec2bb822e05ea6c54aed0", "tree": "5b9f5f9173f0f2197942e7e1239502a086614264", "parents": [ "231c3c3169b689b60fbf9c28ff8a5b7fe2fcf853" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Mon Aug 12 22:58:12 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Mon Aug 12 22:58:12 2024 +0200" }, "message": "improved wording\n" }, { "commit": "231c3c3169b689b60fbf9c28ff8a5b7fe2fcf853", "tree": "702c864bb13913670bbd1867f06d97daa954ce74", "parents": [ "e38b514002ca3453ac415a1b1f6761974c366083" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Mon Aug 12 22:50:17 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Mon Aug 12 22:50:17 2024 +0200" }, "message": "rewrote blog post on yeswehack\n" }, { "commit": "e38b514002ca3453ac415a1b1f6761974c366083", "tree": "1e7aa990a24fb9c1c5f3b14f164c64815cc48e11", "parents": [ "813cb845b4842f9ee9beaddbb9d0650f260c10fd" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Sat Aug 10 12:27:54 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Sat Aug 10 12:28:17 2024 +0200" }, "message": "Corrected website requirements\n" }, { "commit": "813cb845b4842f9ee9beaddbb9d0650f260c10fd", "tree": "8852acc6ec54ee2af5c78a92346bc4829b95b497", "parents": [ "896757d8f5a8b78c30899a8dac66bdcdcea359f6" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Sat Aug 10 12:27:41 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Sat Aug 10 12:28:16 2024 +0200" }, "message": "fixed title in RSS\n" }, { "commit": "896757d8f5a8b78c30899a8dac66bdcdcea359f6", "tree": "077130ca35591070fd44adef2e5a9517367723d9", "parents": [ "dbb14e163c0d38a2d16e93cd6cdab6836fedb420" ], "author": { "name": "Jan Friedrich", "email": "freeandnil@apache.org", "time": "Fri Aug 09 23:07:09 2024 +0200" }, "committer": { "name": "Jan Friedrich", "email": "freeandnil@apache.org", "time": "Fri Aug 09 23:07:09 2024 +0200" }, "message": "fixed typo in log4net issue tracker link\n" }, { "commit": "dbb14e163c0d38a2d16e93cd6cdab6836fedb420", "tree": "80322ec30691b3ca7133bb05f151d3983de689de", "parents": [ "5b4e5e3b0ac7832e5e8e5b2def434c928ede96fc" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 20:46:07 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 20:46:07 2024 +0200" }, "message": "corrected link name\n" }, { "commit": "5b4e5e3b0ac7832e5e8e5b2def434c928ede96fc", "tree": "b0a1b292bae59b612888a1bb410fd69f0d3fbe57", "parents": [ "e3b763abaa247d0ecaca168c4488fe8c70973a51" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 20:42:34 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 20:42:34 2024 +0200" }, "message": "minor fixes\n" }, { "commit": "e3b763abaa247d0ecaca168c4488fe8c70973a51", "tree": "a6d3cd776ab4425a69bc11095d4a867edb1d161f", "parents": [ "b5d26d71c8c9936892fa40fe99f220c41d3a19b0" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 00:00:14 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Aug 08 00:00:14 2024 +0200" }, "message": "reschedule other blogs\n" }, { "commit": "b5d26d71c8c9936892fa40fe99f220c41d3a19b0", "tree": "9dd3ef9b0fb22b2dbae2a4ab7965dd25ee8bd958", "parents": [ "4f6c5d0b3d39d2d339933b1c981ed5497a73ddf1" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 23:59:57 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 23:59:57 2024 +0200" }, "message": "added blog post for Jan\n" }, { "commit": "4f6c5d0b3d39d2d339933b1c981ed5497a73ddf1", "tree": "278af8aa3bc7962b0583c2dc0c8230137aad6009", "parents": [ "2ace13811a042a43988a45a5a4f46888f0cc1046" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:56:01 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:56:01 2024 +0200" }, "message": "added draft for the new log4j bug bounty\n" }, { "commit": "2ace13811a042a43988a45a5a4f46888f0cc1046", "tree": "621ee9577ecf370908adf8dc94e42131763d7b9e", "parents": [ "44521fc0c443c1e96f80abe2bf9d0efc959d9ad8", "2a7b7af57860be8c3de8152b50af1c73ebe60b5c" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:32:29 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:32:29 2024 +0200" }, "message": "Merge branch \u0027main\u0027 of github.com:apache/logging-site\n" }, { "commit": "44521fc0c443c1e96f80abe2bf9d0efc959d9ad8", "tree": "bd30669c23d3a2a06d3a3f84f9673c464ccf4c36", "parents": [ "a90f25c6b5aa1cfd954332541b20e8079c28a671" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:32:10 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Wed Aug 07 22:32:10 2024 +0200" }, "message": "added missing links to conform with ASF guidelines\n" }, { "commit": "2a7b7af57860be8c3de8152b50af1c73ebe60b5c", "tree": "e51cf8d4528dd1ecfab24e34983ac541896c85a2", "parents": [ "a90f25c6b5aa1cfd954332541b20e8079c28a671" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Aug 07 08:56:06 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Wed Aug 07 08:57:20 2024 +0200" }, "message": "Jan Friedrich PMC Member\n" }, { "commit": "a90f25c6b5aa1cfd954332541b20e8079c28a671", "tree": "b322f57c58cab500e2e3238ec04e39011010f7e7", "parents": [ "65717d970117f4e5816abb78d5f12ef9360e5e65" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:52:14 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:52:14 2024 +0200" }, "message": "added license information to plugin\n" }, { "commit": "65717d970117f4e5816abb78d5f12ef9360e5e65", "tree": "e2f838e9e520041651934e564d3248cb50f9f886", "parents": [ "3b76ecbef4829f7ed1aba9e8acbd93d0f9e49ae2" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:33:09 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:33:09 2024 +0200" }, "message": "added information on buildbot building\n" }, { "commit": "3b76ecbef4829f7ed1aba9e8acbd93d0f9e49ae2", "tree": "b589ffa2a7291e0d380e85b796f41a0f8e6b0891", "parents": [ "6f54b04f50272feefe3a95dfe8b242ff5adc125f", "0e8db1be2710e999ec1945860a45d885f2e6a8ad" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:27:03 2024 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 26 22:27:03 2024 +0200" }, "message": "Merge pull request #3 from apache/youtube_embed\n\nAdded video interview from CoC" }, { "commit": "0e8db1be2710e999ec1945860a45d885f2e6a8ad", "tree": "b589ffa2a7291e0d380e85b796f41a0f8e6b0891", "parents": [ "44d9d20cf0abc6de81082875492f297bbf3b2007" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:13:53 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:37 2024 +0200" }, "message": "corrected placeholder image\n" }, { "commit": "44d9d20cf0abc6de81082875492f297bbf3b2007", "tree": "4757c31c245afc9fa8291ef3025a2c8c16faf164", "parents": [ "0232bf9784e0d6e9d227a030d765067fda4d0009" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:13:41 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:37 2024 +0200" }, "message": "added placeholder for youtube video\n" }, { "commit": "0232bf9784e0d6e9d227a030d765067fda4d0009", "tree": "f93489007a413938668df5a36b2a0c0f6f449410", "parents": [ "298ab181acaa86cafca67b7ee6bf7bb101d001d0" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:13:31 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:37 2024 +0200" }, "message": "added pixelmator template for placeholders\n" }, { "commit": "298ab181acaa86cafca67b7ee6bf7bb101d001d0", "tree": "f057806f139d441c286ae366e507a801603e6948", "parents": [ "5ed290b99c10a3ee08a99c5a7032157bef3b3492" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:13:15 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:37 2024 +0200" }, "message": "added support for CSS formatting\n" }, { "commit": "5ed290b99c10a3ee08a99c5a7032157bef3b3492", "tree": "f4a415188fe45967e7b8503ba53af35ce8388c21", "parents": [ "6f54b04f50272feefe3a95dfe8b242ff5adc125f" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 00:05:01 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:37 2024 +0200" }, "message": "draft \u0026 testing for youtube embed for jekyll\n" }, { "commit": "6f54b04f50272feefe3a95dfe8b242ff5adc125f", "tree": "04a9d64ef85ea0eadc8c936b3bd36b530189f5f8", "parents": [ "b9133824f5ffdba59f2147f003d95235c3b13d14" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:23 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Fri Jul 26 22:14:23 2024 +0200" }, "message": "fixed typos\n" }, { "commit": "b9133824f5ffdba59f2147f003d95235c3b13d14", "tree": "a88a92c7649c070edc9ada067a41b330eb2021d1", "parents": [ "8bd1b45a45816b28794a8dc3492ac2ab6ac924e9" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:45:44 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:45:44 2024 +0200" }, "message": "added important links early\n" }, { "commit": "8bd1b45a45816b28794a8dc3492ac2ab6ac924e9", "tree": "20f87893a4e73b192d6e101ffe6f7b0d04c15b7e", "parents": [ "f3c9e7be0ca12d9461c583f687c132e4675da552" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:45:06 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:45:06 2024 +0200" }, "message": "fixed typos\n" }, { "commit": "f3c9e7be0ca12d9461c583f687c132e4675da552", "tree": "a093ba9b4f41c375283f872345abdfc3f47c0d80", "parents": [ "396c2b05bb23b8009875659c8aed4159c5d8497b" ], "author": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:26:52 2024 +0200" }, "committer": { "name": "Christian Grobmeier", "email": "cg@grobmeier.de", "time": "Thu Jul 25 23:26:52 2024 +0200" }, "message": "removed obsolete image\n" }, { "commit": "396c2b05bb23b8009875659c8aed4159c5d8497b", "tree": "808b53a6f86e67d1b1a423b3c73e5da2d609b40b", "parents": [ "b7d77b5d7d175311d76b19ab1c99baeecb4b45b8" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Jul 18 23:31:48 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu Jul 18 23:31:48 2024 +0200" }, "message": "Fix link to my site\n" }, { "commit": "b7d77b5d7d175311d76b19ab1c99baeecb4b45b8", "tree": "4e2234e670afc0090516b9c8ff45c26975e30cdb", "parents": [ "8f68f756c580414784a6869de4520de0299e7746" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Fri Jun 21 09:29:12 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Fri Jun 21 09:30:23 2024 +0200" }, "message": "Thank you Volkan for your service as PMC chair\n\nI hope to keep up the good work.\n" }, { "commit": "8f68f756c580414784a6869de4520de0299e7746", "tree": "453744c11f1ee529b537972a0096669dbc53a8bb", "parents": [ "18da2147dc997d7797079321fee77141747b4f73" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue May 28 09:57:47 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue May 28 09:57:54 2024 +0200" }, "message": "Move `thanks.adoc` from Log4j to here\n" }, { "commit": "18da2147dc997d7797079321fee77141747b4f73", "tree": "34996851c5bd2aa34b1d5d6b2b2a79a6aadfc6f6", "parents": [ "1fe2e9f6dd3983e31dacae6516146847906ad168" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 19:42:17 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 19:42:17 2024 +0200" }, "message": "Fix configuration file example\n" }, { "commit": "1fe2e9f6dd3983e31dacae6516146847906ad168", "tree": "ce4c8b6db4ece3769f0a353e020d6cf83c37fe8d", "parents": [ "6dc42d307be62e4ed97c6a707fb747f9e71d6c81" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 19:29:51 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 19:29:51 2024 +0200" }, "message": "Remove test plugins and regenerate XSD\n" }, { "commit": "6dc42d307be62e4ed97c6a707fb747f9e71d6c81", "tree": "122c80f451bf259291124f6953abde2e77345e29", "parents": [ "f54a7d77fa9ed356636d76c29f20d70425a35e77" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 18:51:51 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Thu May 09 18:51:51 2024 +0200" }, "message": "Fix capitalization in XSD\n" }, { "commit": "f54a7d77fa9ed356636d76c29f20d70425a35e77", "tree": "457619f68da7ab4e46993679d227b2f06de15125", "parents": [ "0bf2cd44f9850709413f8403f0c0084b297d62f8" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu May 09 14:01:12 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu May 09 14:01:12 2024 +0200" }, "message": "Re-generate `log4j-config-2.23.1.xsd` with `@PluginValue` fix (apache/logging-log4j-tools#123)\n" }, { "commit": "0bf2cd44f9850709413f8403f0c0084b297d62f8", "tree": "f08b07b759e14a04a59ac29cf915983da8291641", "parents": [ "90a7b1d9df72d20623bcf68fbb2968143d58e656" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue May 07 21:21:55 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue May 07 21:21:55 2024 +0200" }, "message": "Re-generate `log4j-config-2.23.1.xsd` with plugin subclass fix (apache/logging-log4j-tools#117)\n" }, { "commit": "90a7b1d9df72d20623bcf68fbb2968143d58e656", "tree": "6952ec8916c146a968321a4e963edc88f9735ac4", "parents": [ "2ec74d6e8d673d67152d63f8d0cbf0153010a28b" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 30 15:26:21 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 30 15:26:21 2024 +0200" }, "message": "Delegate guidelines to the ASF website\n" }, { "commit": "2ec74d6e8d673d67152d63f8d0cbf0153010a28b", "tree": "5d5bad9e1b65652d42a8f31ae73415a3a58903af", "parents": [ "677b20b26654291219a95f15c596eefcdfd95a3f" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 30 14:06:17 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 30 14:06:17 2024 +0200" }, "message": "Add Slack channels\n" }, { "commit": "677b20b26654291219a95f15c596eefcdfd95a3f", "tree": "4fd879b1f61485923a22996ff9dbc0efb1d83f43", "parents": [ "a77df57d76fd7932dce06cb86b96ab2ad4516d93" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 25 13:29:38 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 25 13:29:38 2024 +0200" }, "message": "Minor `support.adoc` improvement\n" }, { "commit": "a77df57d76fd7932dce06cb86b96ab2ad4516d93", "tree": "95e84a8c4ba98fca45b8eeaaa73cc1dd98aa65c6", "parents": [ "46b4f97c43a29ec4587bc80e4d1565593e1c12b2" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 25 13:28:19 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 25 13:28:19 2024 +0200" }, "message": "Mention NuGet in the `Download` page\n" }, { "commit": "46b4f97c43a29ec4587bc80e4d1565593e1c12b2", "tree": "d46ce2c5ca16ee2f5479db8336cf3c58281d2f02", "parents": [ "1bc7aa1ce9f3f3a2fec5aad8e5a8022c322908d0" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 23 10:34:30 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Tue Apr 23 10:38:16 2024 +0200" }, "message": "Improve `security.adoc` formatting\n" }, { "commit": "1bc7aa1ce9f3f3a2fec5aad8e5a8022c322908d0", "tree": "0aa84fac2320ac4fae20d8790067c2edd7d250da", "parents": [ "c9b6ccc47c5563a135d240309355d2649baa8cb7" ], "author": { "name": "Jan Friedrich", "email": "freeandnil@apache.org", "time": "Sun Apr 21 21:55:08 2024 +0200" }, "committer": { "name": "Jan Friedrich", "email": "freeandnil@apache.org", "time": "Sun Apr 21 21:55:08 2024 +0200" }, "message": "fix stackoverflow link for log4net\n" }, { "commit": "c9b6ccc47c5563a135d240309355d2649baa8cb7", "tree": "5fdf53032b31e8466ece93e542bcf13e3e055e55", "parents": [ "8a137566051fc30d695f70a2794ff841721ac3ff" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Fri Apr 19 17:50:57 2024 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "piotr.github@karwasz.org", "time": "Fri Apr 19 17:52:17 2024 +0200" }, "message": "Fix broken links\n" }, { "commit": "8a137566051fc30d695f70a2794ff841721ac3ff", "tree": "da34159da10f09e9e57c8932c87513ee27ffc9be", "parents": [ "09aaffc51de0b652f2674b2e1cc804bd76a49ce9" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Fri Apr 19 09:57:42 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Fri Apr 19 09:57:42 2024 +0200" }, "message": "Add threat model sections\n" }, { "commit": "09aaffc51de0b652f2674b2e1cc804bd76a49ce9", "tree": "919cfc1b278b6db8428f95404ecff4e0561e52ba", "parents": [ "cc77d17498eb51da719cec26f43004880e775854" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 18 11:04:01 2024 +0200" }, "committer": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 18 11:04:01 2024 +0200" }, "message": "Fix member name typo\n" } ], "next": "cc77d17498eb51da719cec26f43004880e775854" }