You are viewing a plain text version of this content. The canonical link for it is here.

Posted to github@arrow.apache.org by GitBox <gi...@apache.org> on 2021/12/17 15:44:24 UTC

[GitHub] [arrow] davisusanibar commented on pull request #11986: ARROW-15058: [Java] Update log4j2 version to 2.15.0 in performance module

davisusanibar commented on pull request #11986:
URL: https://github.com/apache/arrow/pull/11986#issuecomment-996822968


   Hi Team
   
   Log4J 2.x {15,16} are discovering more vector attacks.
   
   Log4J 2.x is not mandatory and needed by arrow-performance. I delete that dependency and compile and execute the code and it is worked as expected
   
   Please let me know if we could move with delete than dependency as suggested at https://github.com/apache/arrow/pull/11966


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org