You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Duo Zhang (Jira)" <ji...@apache.org> on 2022/01/21 01:53:00 UTC

[jira] [Created] (HBASE-26691) Replacing log4j with reload4j for branch-2.x

Duo Zhang created HBASE-26691:
---------------------------------

             Summary: Replacing log4j with reload4j for branch-2.x
                 Key: HBASE-26691
                 URL: https://issues.apache.org/jira/browse/HBASE-26691
             Project: HBase
          Issue Type: Task
          Components: logging
            Reporter: Duo Zhang


There are several new CVEs for log4j1 now.

As it is not suitable to upgrade to log4j2 for 2.x releases, let's replace the log4j1 dependencies with reload4j.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)