Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate to Log4j 2 using the 1/2 bridge. #63

Open
marco-brandizi opened this issue Apr 29, 2022 · 0 comments
Open

Migrate to Log4j 2 using the 1/2 bridge. #63

marco-brandizi opened this issue Apr 29, 2022 · 0 comments
Labels

Comments

@marco-brandizi
Copy link
Member

marco-brandizi commented Apr 29, 2022

Use this to change all Ondex modules so that:

  • They depend on log4j-api-2
  • They also depend on log4j-1.2-api, which will reroute all Log4j v1 to version 2 (ie, to the API above)
  • Same for slf4j and common logging (TODO: link to bridges), but Log4j v1 is a priority
  • Modules that use a concrete implementation of any logger, migrate to log4j-core as their implementation
    (so that all of the above is re-routed).
    • This also requires that the log4j.xml files are migrated to v2 (YAML flavour preferrable)
    • A good way to deal with the config files is downloading them from a single place (like the data module)

This is to address the recent security issues discovered with old Log4j. It has not a very high priority, since said issues are relevant only for web servers, yet, the migration above would remove many warnings triggered by dependabots and IT people.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant