[LOG4J2-3254] Need a log4j-core version 2.16 osgi compatible

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.16.0, 2.17.1, 2.17.0
• Component/s: Core, OSGi
• Assignee: Unassigned
• Reporter: Marco Tenti
• Created: 17/Dec/21 14:11
• Updated: 13/Feb/22 07:42

Description

After the big security issue discovered with log4j2 , we need to update all the "old" osgi/karaf installation.

When i run this piece of coce

osgi:install -s mvn:org.apache.logging.log4j/log4j-core/2.13.0

is work fine with this :

osgi:install -s mvn:org.apache.logging.log4j/log4j-core/2.16.0

I get this error :

Error executing command: Error installing bundles:
        Unable to start bundle mvn:org.apache.logging.log4j/log4j-core/2.16.0: org.osgi.framework.BundleException: Unable to resolve org.apache.logging.log4j.core [521](R 521.0): missing requirement [org.apache.logging.log4j.core [521](R 521.0)] osgi.wiring.package; (&(osgi.wiring.package=org.apache.logging.log4j)(version>=2.16.0)(!(version>=3.0.0))) Unresolved requirements: [[org.apache.logging.log4j.core [521](R 521.0)] osgi.wiring.package; (&(osgi.wiring.package=org.apache.logging.log4j)(version>=2.16.0)(!(version>=3.0.0)))]

it is a bug ? or i must use some other library ? i try to use log4j-osgi (version 2.16) like this

osgi:install -s mvn:org.apache.logging.log4j/log4j-osgi/2.16.0

it's work fine, but i still get the error from my bundles project:

Error executing command: Error executing command on bundles:
        Error starting bundle 515: Unable to resolve XXX [515](R 515.0): missing requirement [XXX [515](R 515.0)] osgi.wiring.package; (osgi.wiring.package=org.apache.logging.log4j.core) Unresolved requirements: [[XXX [515](R 515.0)] osgi.wiring.package; (osgi.wiring.package=org.apache.logging.log4j.core)]

this error is not happening with version 2.13