Hello, We are on Dspace 6.3 and we are trying to update our log4J jar file to the latest 2.16.0 version. Even though the log4j 1.X.X files are not included in the latest vulnerability, we still would like to upgrade it.
We changed out the log4j-1.2.17.jar file in ROOT/WEB-INF/lib/ with the log4j-core-2.16.0.jar file (and restarted the app), however the logs show that the app is still looking for the original log4j-1.2.17.jar file. I thought dspace was configured to look at the contents of the ROOT/WEB-INF/lib/ folder and load the libraries based on that, but it looks like I was wrong. What do I have to do to get dspace to use this new Jar? Thank you, Braxton VanGundy -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-community/a7361db0-378e-4f39-aec7-5eca488fb51fn%40googlegroups.com.
