[jira] [Commented] (ARTEMIS-3612) Update Hawtio and strip Log4j from console web app

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ARTEMIS-3612?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17461165#comment-17461165 ] 

ASF subversion and git services commented on ARTEMIS-3612:
----------------------------------------------------------

Commit 2e3c69c9c8df200ab2c1ab202ebe8da0ea5a5652 in activemq-artemis's branch refs/heads/main from Justin Bertram
[ https://gitbox.apache.org/repos/asf?p=activemq-artemis.git;h=2e3c69c ]

ARTEMIS-3612 update Hawtio and strip Log4j from console web app

Move to the latest release of Hawtio 2.14.x.

Also, remove the Log4j archives from the web console application. It's
not necessary to include Log4j archives because Hawtio itself uses SLF4J
and the logging implementation will be provided by the broker runtime.
We already do this for SLF4J.

While not strictly necessary, removing Log4j will ease concerns about
security issues such as the recently announced CVE-2021-44228.


> Update Hawtio and strip Log4j from console web app
> --------------------------------------------------
>
>                 Key: ARTEMIS-3612
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3612
>             Project: ActiveMQ Artemis
>          Issue Type: Task
>            Reporter: Justin Bertram
>            Assignee: Justin Bertram
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.1#820001)