Eyal Allweil created DATAFU-162:
-----------------------------------

             Summary: Upgrade Log4j version
                 Key: DATAFU-162
                 URL: https://issues.apache.org/jira/browse/DATAFU-162
             Project: DataFu
          Issue Type: Improvement
            Reporter: Eyal Allweil


Although the [infamous Log4J 
vulnerability|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832] is 
not relevant for DataFu (we are dependent on log4j 1.x, which is not affected) 
it is still a pretty good idea to upgrade to a new version.

The upgrade should keep our logs as similar as possible to the existing 
version, but this shouldn't necessitate a major version release since this 
isn't a breaking change.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to