-
Notifications
You must be signed in to change notification settings - Fork 10
Open
Labels
Description
Use this to change all Ondex modules so that:
- They depend on log4j-api-2
- They also depend on log4j-1.2-api, which will reroute all Log4j v1 to version 2 (ie, to the API above)
- Same for slf4j and common logging (TODO: link to bridges), but Log4j v1 is a priority
- Modules that use a concrete implementation of any logger, migrate to log4j-core as their implementation
(so that all of the above is re-routed).- This also requires that the log4j.xml files are migrated to v2 (YAML flavour preferrable)
- A good way to deal with the config files is downloading them from a single place (like the data module)
This is to address the recent security issues discovered with old Log4j. It has not a very high priority, since said issues are relevant only for web servers, yet, the migration above would remove many warnings triggered by dependabots and IT people.
Reactions are currently unavailable