Hi All, I would open a discussion about log4j2 update. Would we consider going up to log4j2 in a minor release (e.g. 3.7) or only in a major one, like 4.0? The latest log4j1 version (1.2.17) is really old and vulnerable, but log4j2 has a different config format, which means users should adopt their config files when updating ZooKeeper. Afaik we are compatible with both of them because of slf4j, but the default is log4j1 at the moment.
What do you think about going up to log4j2 with 3.7? Thanks, Tamaas
