Skip to content

remove use of unsupported log4gv1 #5941

@pjfanning

Description

@pjfanning
ISSUE TYPE
  • Improvement Request

https://github.com/apache/cloudstack/blob/main/pom.xml#L79

Log4jv1 has not been supported in many years and has multiple CVEs open against it. The ASF gets multiple daily queries/requests about log4j and most of them are expecting us to upgrade

  • log4jv2 2.17.1 and above is one option
  • reload4j is a fork of log4j that is maintained

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions