Hi Antoine,

I don't see log4j2 included in the latest POI 5.2.3 bundle I did.
It's excluded from the shade config.

So I think we are already good for the next release cycle.

Regards
JB

On Thu, Sep 29, 2022 at 1:41 PM Antoine DESSAIGNE
<antoine.dessai...@gmail.com> wrote:
>
> Hello everybody,
>
> I just noticed that the latest Apache POI bundle of service mix inlines a
> lot of libraries including Log4j2. Therefore when using POI there's an
> error message telling that Log4j2 is not configured because there are 2
> log4j2 : one inside the bundle and one outside (this one is configured)
>
> Is it possible to exclude log4j2 from the poi bundle? maybe there are other
> libraries that shouldn't be included in the bundle like commons-codec,
> commons-collection4, commons-io and commons-math3. What do you think?
>
> Thank you very much
>
> Antoine

Reply via email to