Muke Z ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ad43b47ad-a959-49e0-862f-01b93431e21d ) *created* an issue
GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) / Improvement ( https://osgeo-org.atlassian.net/browse/GEOS-10333?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) GEOS-10333 ( https://osgeo-org.atlassian.net/browse/GEOS-10333?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) log4j vulnerability issue ( https://osgeo-org.atlassian.net/browse/GEOS-10333?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) Issue Type: Improvement Affects Versions: 2.20.1 Assignee: Unassigned Components: Configuration Created: 13/Dec/21 1:06 AM Priority: Medium Reporter: Muke Z ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ad43b47ad-a959-49e0-862f-01b93431e21d ) Due to the vulnerability issue of log4j recently. Is there a way can turn off log4j in Geoserver? or is there a plan patch for upgrading log4j? Thanks ( https://osgeo-org.atlassian.net/browse/GEOS-10333#add-comment?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) Add Comment ( https://osgeo-org.atlassian.net/browse/GEOS-10333#add-comment?atlOrigin=eyJpIjoiMmViODQ3YTdkMDQ4NDc2ZGJkMmNkNWFkYjBjMGNhYmMiLCJwIjoiaiJ9 ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:f6eba4b )
_______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
