Sounds like 2 +1 to my -0. :D I'll start working on this now.
On Mon, Dec 13, 2021 at 2:09 PM Nicholas DiPiazza <nicholas.dipia...@gmail.com> wrote: > > I prefer upgrade to log4j2 > > On Mon, Dec 13, 2021, 12:05 PM Tim Allison <talli...@apache.org> wrote: > > > All, > > I'm currently in the process of building the rc1 for Tika 2.x. On > > TIKA-3616, Luís Filipe Nassif asked if we could upgrade log4j to > > log4j2 in the 1.x branch. I think we avoided that because it would be > > a breaking change(?). There are security vulns in log4j and it hit > > EOL > > in August 2015. > > Should we upgrade the Tika 1.x branch for log4j2? > > > > Best, > > > > Tim > > > > > > [1] > > https://issues.apache.org/jira/browse/TIKA-3616?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457595#comment-17457595 > >
