[HDDS-6266] ozone public release 1.2.1 isn't using latest log4j

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.2.1
• Component/s: build
• Assignee: Unassigned
• Reporter: Diego Jaramillo
• Created: 04/Feb/22 19:07
• Updated: 03/Aug/22 09:13
• Resolved: 03/Aug/22 09:13

Description

Hello,

The release published here https://ozone.apache.org/release/1.2.1/ is still not using the latest log4j version:
log4j-core-2.16.0.jar
log4j-api-2.16.0.jar

 

$ wget https://www.apache.org/dyn/closer.cgi/ozone/1.2.1/ozone-1.2.1.tar.gz
$ tar -tvf ozone-1.2.1.tar.gz 'ozone-1.2.1/share/ozone/lib/log4j*'
-rw-r--r-- ethanrose/staff 1789565 2021-12-15 17:40 ozone-1.2.1/share/ozone/lib/log4j-core-2.16.0.jar
-rw-r--r-- ethanrose/staff  489884 2021-12-15 17:40 ozone-1.2.1/share/ozone/lib/log4j-1.2.17.jar
-rw-r--r-- ethanrose/staff  301892 2021-12-15 17:40 ozone-1.2.1/share/ozone/lib/log4j-api-2.16.0.jar

 

While each user can easily update their libraries, it would be good to have a release using log4j 2.17.1.

 

 

Issue Links

• duplicates: HDDS-6143 Update log4j version to 2.17.1