Chao Wang created IOTDB-2497: -------------------------------- Summary: Upgrade log4j1 to log4j2 Key: IOTDB-2497 URL: https://issues.apache.org/jira/browse/IOTDB-2497 Project: Apache IoTDB Issue Type: Improvement Components: Core/Server Reporter: Chao Wang Assignee: Chao Wang Fix For: 0.13.0
Currently, log4j1.x has reached EOM. The community maintains only log4j2.x.And log4j1.x has a lot of CVEs.CVE-2022-23302/23305/23307.The impact of these vulnerabilities is still significant.So we can upgrade log4j to 2.x. -- This message was sent by Atlassian Jira (v8.20.1#820001)