Chao Wang created IOTDB-2497:
--------------------------------

             Summary: Upgrade log4j1 to log4j2
                 Key: IOTDB-2497
                 URL: https://issues.apache.org/jira/browse/IOTDB-2497
             Project: Apache IoTDB
          Issue Type: Improvement
          Components: Core/Server
            Reporter: Chao Wang
            Assignee: Chao Wang
             Fix For: 0.13.0


Currently, log4j1.x has reached EOM. The community maintains only log4j2.x.And 
log4j1.x has a lot of CVEs.CVE-2022-23302/23305/23307.The impact of these 
vulnerabilities is still significant.So we can upgrade log4j to 2.x.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to