Re: Log4j settings to avoid the recent RCE

Any reason why it is still on log4j1, this is pretty old, I understand it needs some api changes to upgrade to 2.. On Mon, 13 Dec 2021, 2:42 pm Jeff Zhang, wrote: > Zeppelin doesn't use log4j2, it use log4j 1. So I don't think Zeppelin is > affected > > Great Info 于2021年12月13日周一 17:07写道： > > >

Re: Log4j settings to avoid the recent RCE

Zeppelin doesn't use log4j2, it use log4j 1. So I don't think Zeppelin is affected Great Info 于2021年12月13日周一 17:07写道： > Does anyone how to set below option so that zeppelin daemon can pick this > > - options Dlog4j2.formatMsgNoLookups=true > > Thanks > Cod > -- Best Regards Jeff Zhang

Log4j settings to avoid the recent RCE

Does anyone how to set below option so that zeppelin daemon can pick this - options Dlog4j2.formatMsgNoLookups=true Thanks Cod