Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue #7297 - Removing log4j 1.x #7314

Merged
merged 1 commit into from
Dec 22, 2021

Conversation

joakime
Copy link
Contributor

@joakime joakime commented Dec 20, 2021

Signed-off-by: Joakim Erdfelt [email protected]

Signed-off-by: Joakim Erdfelt <[email protected]>
@joakime joakime requested review from olamy and sbordet December 21, 2021 12:50
@joakime joakime self-assigned this Dec 21, 2021
@joakime joakime added Build dependencies Pull requests that update a dependency file labels Dec 21, 2021
@joakime joakime linked an issue Dec 21, 2021 that may be closed by this pull request
@joakime
Copy link
Contributor Author

joakime commented Dec 22, 2021

@olamy the technique used here is just to move the log4j.version and <dependency> out of the pom so that we don't constantly trip various vulnerability scans for this deprecated support.

@joakime joakime merged commit a8f60c8 into jetty-9.4.x Dec 22, 2021
@joakime joakime deleted the jetty-9.4.x-deprecate-log4j-1.x branch December 22, 2021 21:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Build dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Deprecate log4j 1.x support
2 participants