[jira] [Assigned] (ARTEMIS-3453) exclude transitive log4j dep from zookeeper usage

["Robbie Gemmell (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-3453?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell reassigned ARTEMIS-3453:
---------------------------------------

    Assignee: Robbie Gemmell

> exclude transitive log4j dep from zookeeper usage
> -------------------------------------------------
>
>                 Key: ARTEMIS-3453
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3453
>             Project: ActiveMQ Artemis
>          Issue Type: Task
>    Affects Versions: 2.18.0
>            Reporter: Robbie Gemmell
>            Assignee: Robbie Gemmell
>            Priority: Major
>             Fix For: 2.19.0
>
>          Time Spent: 1h 50m
>  Remaining Estimate: 0h
>
> The quorum bits introduced in ARTEMIS-2716 in 2.18.0 use Zookeeper, which brings a transitive dependency on log4j 1.2.17, which is end of life. Although log4j 1.2.17 was not included in the distribution archives, it still a transitive dependency of some of the modules that use these quorum bits.
> The original change does look to exclude slf4j-log4j12, but this doesnt exclude log4j itself which is also a direct dependency of zookeeper (ironically, it seems not for direct logging, but only some JMX feature, with slf4j used for the actual logging). It should also be excluded.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)