[AXIS2-5857] Log4j 1.x has reached EOL

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.7.5
• Fix Version/s: 1.8.1
• Assignee: Robert Lazarski
• Reporter: spoorti
• Created: 28/Jun/17 11:15
• Updated: 09/Mar/22 19:55
• Resolved: 09/Mar/22 19:55

Description

The log4j 1.x has reached EOL. Even the latest release version of Axis2 contains the 1.x version of the log4j.
It need to be upgraded to 2.8.2 or higher since the other 2.x versions has vulnerability reported.