Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove Log4j v1 back-end #306

Open
vorburger opened this issue Dec 15, 2021 · 1 comment
Open

Remove Log4j v1 back-end #306

vorburger opened this issue Dec 15, 2021 · 1 comment
Labels
P2 type=other Miscellaneous activities not covered by other type= labels

Comments

@vorburger
Copy link
Member

As per https://github.com/apache/logging-log4j2/pull/629/files,

given that Flogger is a "library" (itself for logging, but whatever) and not an "application", given that Log4j v1 has been officially unmaintained for many years, and is partially broken on Java 9+, and has at least one known security vulnernability which will never be patched,

would you possibly consider simply entirely removing https://github.com/google/flogger/tree/master/log4j from this project,

given that there is https://github.com/google/flogger/tree/master/log4j2?

This is similar to e.g. netty/netty#11925 suggestion to an (otherwise unrelated) project.

@chaoren chaoren added P2 type=other Miscellaneous activities not covered by other type= labels labels Jan 4, 2022
@vorburger
Copy link
Member Author

FTR: Google now no longer builds the Log4j (v1 not v2) backend internally, but the related code is currently still kept in this Git repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P2 type=other Miscellaneous activities not covered by other type= labels
Projects
None yet
Development

No branches or pull requests

2 participants