[Libreoffice-bugs] [Bug 147334] New: Impact of deleting ant-apache-log4j-1.10.9.jar from the server

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=147334

            Bug ID: 147334
           Summary: Impact of deleting ant-apache-log4j-1.10.9.jar from
                    the server
           Product: LibreOffice
           Version: 7.2.5.2 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs@lists.freedesktop.org
          Reporter: ghazi.noctu...@gmail.com

Hello,

LibreOffice is still using the following dependency

https://mvnrepository.com/artifact/org.apache.ant/ant-apache-log4j/1.10.9

that has some known vulnerability issues from its dependencies, so no direct
issues.

If I remove it, will LibreOffice continue to work properly? Should remove its
dependencies too? Is there any way to use another logger like logback?

Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.