[
https://issues.apache.org/jira/browse/CTAKES-557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17653227#comment-17653227
]
Sean Finan commented on CTAKES-557:
-----------------------------------
Thank you for asking!
ctakes has a lot of dependencies, and I expect that at least one will still
depend upon log4j v1. So, I am hoping to use the log4j v1 to v2 bridge:
[https://logging.apache.org/log4j/2.x/manual/migration.html]
ctakes itself should still be upgraded to v2 as much as possible.
I think that the custom org.apache.log4j.Appender in
org.apache.ctakes.gui.component.LoggerPanel will not work with the bridge. I
think that the bridge just acts as a facade for the most common log4j calls and
implementing old v1 interfaces will not work.
I haven't looked into creating a v2 custom org.apache.log4j.Appender It is
probably trivial, I just haven't had the time to look into it.
So, I definitely welcome any information that you can give me on a v2 Appender
equivalent.
If you can refactor LoggerPanel to use it that would be better. If you do
that, I think that the next step would be to change the pom to use the bridge
and run some tests.
Many thanks!
> remove log4jv1 dependency
> -------------------------
>
> Key: CTAKES-557
> URL: https://issues.apache.org/jira/browse/CTAKES-557
> Project: cTAKES
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
>
> Log4jv1 has been EndOfLife for many years and has a number of unfixed
> security issues. Could you use log4jv2 instead?
>
> https://repo1.maven.org/maven2/org/apache/ctakes/ctakes-core/4.0.0.1/ctakes-core-4.0.0.1.pom
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
