apurtell opened a new pull request, #110: URL: https://github.com/apache/phoenix-omid/pull/110
Log4J1 is abandoned and has a number of significant CVEs filed for it. [Reload4J](https://reload4j.qos.ch) is a drop in binary compatible replacement for Log4J1 with all known security issues remediated. Move up `hbase.version` to 2.4.13 and `hadoop.version` to 2.10.2 because those downstream versions have also migrated from log4j1 to reload4j. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@phoenix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
