Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-11628

Investigate replacing log4j with reload4j

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • Impala 4.2.0
    • Impala 4.2.0
    • Frontend
    • None
    • ghx-label-5

    Description

      log4j1 has been unmaintained and end of life for a while. Given the need for security and fixes for CVEs, this is unmaintainable. One option is to switch to log4j2, and that is tracked in IMPALA-9601. However, there is also the reload4j project (https://reload4j.qos.ch/) which is maintaining a patched log4j1.

      If this is a drop-in replacement, then this may be an easier path in the short term. It sounds worth exploring.

      Attachments

        Issue Links

          Activity

            People

              MikaelSmith Michael Smith
              joemcdonnell Joe McDonnell
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: