PJ Fanning created INLONG-812:
---------------------------------

             Summary: inlong still has log4j v1 usages
                 Key: INLONG-812
                 URL: https://issues.apache.org/jira/browse/INLONG-812
             Project: Apache InLong
          Issue Type: Bug
          Components: inlong-platform
            Reporter: PJ Fanning


https://github.com/search?q=repo%3Aapache%2Finlong%20log4j.version&type=code

* log4j v1 is not maintained and has serious security issues
* you could use reload4j as a drop-in replacement that has security fixes - 
https://reload4j.qos.ch/
* there is a bridge jar maintained by the Apache Logging team - see 
https://logging.apache.org/log4j/2.x/manual/migration.html



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to