pjfanning opened a new issue #3819:
URL: https://github.com/apache/rocketmq/issues/3819


   
   **BUG REPORT**
   
   Related to but separate from https://github.com/apache/rocketmq/issues/3816
   
   https://github.com/apache/rocketmq/blob/develop/pom.xml#L582
    
   log4j v1 is not supported (EOL) and numerous CVEs are open against it
   * ideally use log4jv2 instead
   * reload4j is a drop-in replacement for log4jv1 - but ideally, rocketmq 
should standardise on one log framework and log4jv2 is  used in rocketmq too


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to