You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@myfaces.apache.org by "Thomas Andraschko (Jira)" <de...@myfaces.apache.org> on 2022/03/02 21:46:00 UTC

[jira] [Commented] (MYFACES-4429) replace use of log4j v1 (builder plugin)

    [ https://issues.apache.org/jira/browse/MYFACES-4429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17500397#comment-17500397 ] 

Thomas Andraschko commented on MYFACES-4429:
--------------------------------------------

Can you provide a PR? Otherwise its only used whem building myfaces core, so not a security problem

> replace use of log4j v1 (builder plugin)
> ----------------------------------------
>
>                 Key: MYFACES-4429
>                 URL: https://issues.apache.org/jira/browse/MYFACES-4429
>             Project: MyFaces Core
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> [https://repo1.maven.org/maven2/org/apache/myfaces/buildtools/myfaces-builder-plugin/1.0.11/myfaces-builder-plugin-1.0.11.pom]
> log4jv1 is end-of-life and has multiple security issues



--
This message was sent by Atlassian Jira
(v8.20.1#820001)