Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
Impala 4.2.0
-
None
-
ghx-label-5
Description
log4j1 has been unmaintained and end of life for a while. Given the need for security and fixes for CVEs, this is unmaintainable. One option is to switch to log4j2, and that is tracked in IMPALA-9601. However, there is also the reload4j project (https://reload4j.qos.ch/) which is maintaining a patched log4j1.
If this is a drop-in replacement, then this may be an easier path in the short term. It sounds worth exploring.
Attachments
Issue Links
- relates to
-
IMPALA-9601 Migrate Impala from log4j to log4j2
- Open