Log4j Update Doubt

[ritika jain <ri...@gmail.com>]

Hi,

How manifoldcf uses log4j files in bin directory/distribution. If this is
the location "D:\\Manifoldcf\apache-manifoldcf-2.14\lib" that is the lib
folder only.(for physical file presence)

Also if the log4j dependency issue has been resolved and the version 2.15
or higher is updated, then will it be reflected in Manifoldcf 2.14 version
also. If not , can you help to let me know at what places the log4j2.4.1
jar files should be replaced with 2.15.

When the log4j2.15 jar has been manually replaced in 'lib' folder  and the
older version is deleted (2.4.1), got this as error
[image: image.png]

What other location is needed to have the latest jar file.

Thanks
Ritika

Re: Log4j Update Doubt

[Karl Wright <da...@gmail.com>]

We cannot do back patches of older versions of ManifoldCF.  There is a new
release which shipped in January that addresses log4j issues.  I suggest
updating to that.

Karl


On Tue, Mar 15, 2022 at 8:59 AM ritika jain <ri...@gmail.com>
wrote:

> Hi,
>
> How manifoldcf uses log4j files in bin directory/distribution. If this is
> the location "D:\\Manifoldcf\apache-manifoldcf-2.14\lib" that is the lib
> folder only.(for physical file presence)
>
> Also if the log4j dependency issue has been resolved and the version 2.15
> or higher is updated, then will it be reflected in Manifoldcf 2.14 version
> also. If not , can you help to let me know at what places the log4j2.4.1
> jar files should be replaced with 2.15.
>
> When the log4j2.15 jar has been manually replaced in 'lib' folder  and the
> older version is deleted (2.4.1), got this as error
> [image: image.png]
>
> What other location is needed to have the latest jar file.
>
> Thanks
> Ritika
>