You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flume.apache.org by "Ralph Goers (Jira)" <ji...@apache.org> on 2022/02/28 05:12:00 UTC

[jira] [Resolved] (FLUME-3396) log4j upgrade from 1.x to latest 2.x

     [ https://issues.apache.org/jira/browse/FLUME-3396?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ralph Goers resolved FLUME-3396.
--------------------------------
    Fix Version/s: 1.10.0
       Resolution: Duplicate

> log4j upgrade from 1.x to latest 2.x
> ------------------------------------
>
>                 Key: FLUME-3396
>                 URL: https://issues.apache.org/jira/browse/FLUME-3396
>             Project: Flume
>          Issue Type: Question
>    Affects Versions: 1.9.0
>            Reporter: Kuldeep Singh
>            Priority: Major
>             Fix For: 1.10.0
>
>
> Hi Team,
> As we know that Log4j 1.x has reached its end-of-life in 2015 and we are no longer getting any support on that outdated version. Its quite risky to run flume and respective plugins with outdated and unmaintained dependencies.
> Do you have any plan to upgrade the recent Log4j 2 version? (Obviously with CVE-2021-44228 fixes)



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@flume.apache.org
For additional commands, e-mail: issues-help@flume.apache.org