[
https://issues.apache.org/jira/browse/AMQ-8472?focusedWorklogId=720973&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-720973
]
ASF GitHub Bot logged work on AMQ-8472:
---------------------------------------
Author: ASF GitHub Bot
Created on: 04/Feb/22 16:01
Start Date: 04/Feb/22 16:01
Worklog Time Spent: 10m
Work Description: gemmellr commented on pull request #754:
URL: https://github.com/apache/activemq/pull/754#issuecomment-1030122340
Running maven dependency:tree with this change in place still shows lots of
instances of log4j and slf4j-log4j12 still present in the build. Some are
provided scope and so wont be passed on, but not all, and either way they still
shouldn't exist. Probably some more exclusions and/or dependencyManagement
needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 720973)
Time Spent: 40m (was: 0.5h)
> Switch to reload4j for logging
> ------------------------------
>
> Key: AMQ-8472
> URL: https://issues.apache.org/jira/browse/AMQ-8472
> Project: ActiveMQ
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Priority: Major
> Fix For: 5.16.4
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
> This task is to switch AMQ 5.16.x to use Reload4J instead of Log4J for
> logging. That way we get fixes for the various CVEs in Log4J 1.x, until AMQ
> picks up Log4J 2.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
