[ZEPPELIN-5613] Zeppelin 0.10.0 is okay from log4j security ?

• Type: Test
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Guanhua LI
• Reporter: danbi Han
• Created: 16/Dec/21 08:31
• Updated: 20/Apr/22 09:45

Description

Zeppelin 0.10.0 use log4j 1.2.x version.

1.x version is EOL, so I think zeppelin needs update to latest version of log4j (maybe v2.16) 

is it okay from log4j issues?

• log4j issues
  • https://logging.apache.org/log4j/2.x/security.html

Issue Links

• links to: GitHub Pull Request #4286