Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-26570

Upgrade to log4j 2.16.0

    XMLWordPrintableJSON

Details

    • Umbrella
    • Status: Resolved
    • Major
    • Resolution: Done
    • None
    • None
    • dependencies
    • None

    Description

      Log4j just release version 2.16.0 where jndi is turned off by default. Based on the release announcement it is not required to fix CVE-2021-44228 but recommended. 

      https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4

      Attachments

        Issue Links

          is a child of

          Task - A task that needs to be done. HBASE-26560 Address recent the log4j2 CVEs

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Activity

            People

              psomogyi Peter Somogyi
              psomogyi Peter Somogyi
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: