You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kylin.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2022/04/06 10:22:00 UTC

[jira] [Created] (KYLIN-5174) remove log4jv1 dependency

PJ Fanning created KYLIN-5174:
---------------------------------

             Summary: remove log4jv1 dependency
                 Key: KYLIN-5174
                 URL: https://issues.apache.org/jira/browse/KYLIN-5174
             Project: Kylin
          Issue Type: Improvement
            Reporter: PJ Fanning


Log4j v1 is end of life and has multiple unfixed security issues.

Replacements include:
 * log4j v2 (eg v2.17.1)
 * logback
 * reload4j (a drop in replacement for log4j v1)

This is an example line in kylin build:

https://github.com/apache/kylin/blob/main/pom.xml#L144



--
This message was sent by Atlassian Jira
(v8.20.1#820001)