[
https://issues.apache.org/jira/browse/HADOOP-18088?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17816664#comment-17816664
]
ASF GitHub Bot commented on HADOOP-18088:
-----------------------------------------
steveloughran opened a new pull request, #6547:
URL: https://github.com/apache/hadoop/pull/6547
Cherrypick of two patches from branch-3.3, as the 3.4/trunk branches are
still on log4j 1.x
HADOOP-18088. Replace log4j 1.x with reload4j. (#4052)
HADOOP-18354. Upgrade reload4j to 1.22.2 due to XXE vulnerability (#4635
Compilation works; lets see what yetus says.
I'm also doing local release build to make sure there are no log4j 2
artifacts being pulled in as part of dependencies -looks like mockito-core and
cosmos-db pull them in somehow
### For code changes:
- [X] Does the title or this PR starts with the corresponding JIRA issue id
(e.g. 'HADOOP-17799. Your PR title ...')?
- [ ] Object storage: have the integration tests been executed and the
endpoint declared according to the connector-specific documentation?
- [X] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
- [X] If applicable, have you updated the `LICENSE`, `LICENSE-binary`,
`NOTICE-binary` files?
> Replace log4j 1.x with reload4j
> -------------------------------
>
> Key: HADOOP-18088
> URL: https://issues.apache.org/jira/browse/HADOOP-18088
> Project: Hadoop Common
> Issue Type: Improvement
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.10.2, 3.2.4, 3.3.3
>
> Time Spent: 8h
> Remaining Estimate: 0h
>
> As proposed in the dev mailing list
> (https://lists.apache.org/thread/fdzkv80mzkf3w74z9120l0k0rc3v7kqk) let's
> replace log4j 1 with reload4j in the maintenance releases (i.e. 3.3.x, 3.2.x
> and 2.10.x)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
