[
https://issues.apache.org/jira/browse/FLUME-3396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17498708#comment-17498708
]
Ralph Goers commented on FLUME-3396:
------------------------------------
That work was done prior to the release of 1.9.0. Virtually all the folks who
participated in that decision have moved on to other things. I have been trying
to upgrade all the dependencies as they were seriously out of date. I have done
most of them and will get a release out when the rest are completed.
> log4j upgrade from 1.x to latest 2.x
> ------------------------------------
>
> Key: FLUME-3396
> URL: https://issues.apache.org/jira/browse/FLUME-3396
> Project: Flume
> Issue Type: Question
> Affects Versions: 1.9.0
> Reporter: Kuldeep Singh
> Priority: Major
> Fix For: 1.10.0
>
>
> Hi Team,
> As we know that Log4j 1.x has reached its end-of-life in 2015 and we are no
> longer getting any support on that outdated version. Its quite risky to run
> flume and respective plugins with outdated and unmaintained dependencies.
> Do you have any plan to upgrade the recent Log4j 2 version? (Obviously with
> CVE-2021-44228 fixes)
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
