You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hbase.apache.org by "Andrew Kyle Purtell (Jira)" <ji...@apache.org> on 2022/03/04 20:08:00 UTC

[jira] [Updated] (HBASE-26691) Replacing log4j with reload4j for branch-2.x

     [ https://issues.apache.org/jira/browse/HBASE-26691?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Kyle Purtell updated HBASE-26691:
----------------------------------------
    Fix Version/s: 2.4.11

> Replacing log4j with reload4j for branch-2.x
> --------------------------------------------
>
>                 Key: HBASE-26691
>                 URL: https://issues.apache.org/jira/browse/HBASE-26691
>             Project: HBase
>          Issue Type: Task
>          Components: logging
>            Reporter: Duo Zhang
>            Assignee: Duo Zhang
>            Priority: Critical
>             Fix For: 2.5.0, 2.6.0, 2.4.11
>
>
> There are several new CVEs for log4j1 now.
> As it is not suitable to upgrade to log4j2 for 2.x releases, let's replace the log4j1 dependencies with reload4j.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)