orpiske commented on pull request #714:
URL: https://github.com/apache/camel-website/pull/714#issuecomment-992415776


   > > Camel on Apache Kafka Connectors.
   > > Then I read that Kafka is using the old log4j v1 - but would like to 
know more what is the status on Kafka. However again its a Kafka problem and 
not CKC but would be good to refer to their announcement or something. For 
Quarkus then I have seen a tweet, not a blog post on their website. 
https://twitter.com/QuarkusIO/status/1469279468829265922?s=20
   > 
   > CKC uses log4j2 for testing. I'll search for additional details for Kafka 
and I'll share here.
   
   There is no [official statement from 
Kafka](https://kafka.apache.org/cve-list) at this moment. Although they are 
working on migrating to log4j2 via 
[KAFKA-9366](https://issues.apache.org/jira/browse/KAFKA-9366), this has not 
been merged yet (details on the ticket). Log4j v1 [does not seem to be impacted 
by this CVE](https://twitter.com/ceki/status/1469449618316533762).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to