You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@texera.apache.org by "pjfanning (via GitHub)" <gi...@apache.org> on 2026/07/05 08:50:18 UTC
[I] texera still uses log4j jars affected by log4shell [texera]
pjfanning opened a new issue, #6153:
URL: https://github.com/apache/texera/issues/6153
Log4Shell is one of the most notorious security issues ever to affect OSS libs.
Texera still ships log4j jars affected by this issue.
https://github.com/search?q=repo%3Aapache%2Ftexera+log4j-1.2&type=code
No log4j release for v1.2 exists that fixes log4shell. You can use reload4j as a drop-in replacement or upgrade so that you use up to date log4j 2.x jars.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] texera still uses log4j jars affected by log4shell [texera]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #6153:
URL: https://github.com/apache/texera/issues/6153#issuecomment-4885441664
<!-- texera:template-compliance -->
👋 Thanks for opening this issue, @pjfanning!
It looks like the issue description doesn't quite follow our template yet:
- This issue doesn't appear to use one of our templates (Bug, Feature, or Task). Please open it using a template so the required details are captured.
Filling out the template helps reviewers understand and triage your contribution faster. Please edit the description to complete it. This message will disappear automatically once the template is followed.
You can find the template prompts by editing the description, or see [CONTRIBUTING.md](https://github.com/apache/texera/blob/main/CONTRIBUTING.md) for the full contribution flow.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] texera still uses log4j jars affected by log4shell [texera]
Posted by "Yicong-Huang (via GitHub)" <gi...@apache.org>.
Yicong-Huang closed issue #6153: texera still uses log4j jars affected by log4shell
URL: https://github.com/apache/texera/issues/6153
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] texera still uses log4j jars affected by log4shell [texera]
Posted by "Yicong-Huang (via GitHub)" <gi...@apache.org>.
Yicong-Huang commented on issue #6153:
URL: https://github.com/apache/texera/issues/6153#issuecomment-4889097345
upgraded to 2.x in #6199. Thanks @pjfanning!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org