[FLUME-3396] log4j upgrade from 1.x to latest 2.x

• Type: Question
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.9.0
• Fix Version/s: 1.10.0
• Assignee: Unassigned
• Reporter: Kuldeep Singh
• Created: 17/Dec/21 05:38
• Updated: 28/Feb/22 06:20
• Resolved: 28/Feb/22 05:11

Description

Hi Team,

As we know that Log4j 1.x has reached its end-of-life in 2015 and we are no longer getting any support on that outdated version. Its quite risky to run flume and respective plugins with outdated and unmaintained dependencies.

Do you have any plan to upgrade the recent Log4j 2 version? (Obviously with CVE-2021-44228 fixes)

Issue Links

• duplicates: FLUME-2050 Upgrade to log4j2 (when GA)