[KAFKA-13729] Kafka Core Components and other projects (like broker) using older version of the log4j 1.x, need to update 2.x

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.4.1
• Component/s: core
• Labels: log4j2
• Environment: Production
• Flags: Patch, Important

Language

English

• Assignee: Unassigned
• Reporter: viswateja.satrapu
• Created: 11/Mar/22 09:42
• Updated: 11/Mar/22 11:28
• Resolved: 11/Mar/22 11:28

Description

Hi Team, 

 

We were using Apache Kafka, to handle message transfer. Now in the security audit, we got vulnerability, due to Apache Kafka core and other projects were using the older log4j versions 1.x. 

You Guys need to update the log4j version from 1.x to 2.x in  Core and other subprojects of Kafka. Can you please help us, to fix that vulnerability,  otherwise can you please share Guide us to upgrade that version from log4j  1.x to log4j 2.x

Issue Links

• duplicates: KAFKA-9366 Upgrade log4j to log4j2