Robbie Gemmell created ARTEMIS-3453:
---------------------------------------
Summary: exclude transitive log4j dep from zookeeper usage
Key: ARTEMIS-3453
URL: https://issues.apache.org/jira/browse/ARTEMIS-3453
Project: ActiveMQ Artemis
Issue Type: Task
Affects Versions: 2.18.0
Reporter: Robbie Gemmell
Fix For: 2.19.0
The quorum bits introduced in ARTEMIS-2716 in 2.18.0 use Zookeeper, which
brings a transitive dependency on log4j 1.2.17, which is end of life. Although
log4j 1.2.17 was not included in the distribution archives, it still a
transitive dependency of some of the modules that use these quorum bits.
The original change does look to exclude slf4j-log4j12, but this doesnt exclude
log4j itself which is also a direct dependency of zookeeper (ironically, it
seems not for direct logging, but only some JMX feature, with slf4j used for
the actual logging). It should also be excluded.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
