[jira] [Created] (HBASE-26691) Replacing log4j with reload4j for branch-2.x

[Duo Zhang (Jira)]

Duo Zhang created HBASE-26691:
---------------------------------

             Summary: Replacing log4j with reload4j for branch-2.x
                 Key: HBASE-26691
                 URL: https://issues.apache.org/jira/browse/HBASE-26691
             Project: HBase
          Issue Type: Task
          Components: logging
            Reporter: Duo Zhang


There are several new CVEs for log4j1 now.

As it is not suitable to upgrade to log4j2 for 2.x releases, let's replace the 
log4j1 dependencies with reload4j.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)