search

NixOS / nixpkgs

Nix Packages collection & NixOS
MIT License
18.38k stars 14.34k forks source link

Remove log4j 1.x #199936

Open mweinelt opened 2 years ago

mweinelt commented 2 years ago

Support for log4j 1.x ended 7 years ago and should have been removed a long time ago. There is a 2.x version to potentially upgrade to.

Log4j 1 reached End-Of-Life on August 2015. The reload4j project provides a drop-in replacement for Log4j 1.x with maintenance and security fixes.

https://endoflife.date/log4j

cc @NeQuissimus

tomodachi94 commented 4 weeks ago

I can only find one usage of log4j v1 in Nixpkgs: https://github.com/NixOS/nixpkgs/blob/b90f2b68c376117634e41be866624d87cadeacc2/pkgs/by-name/mu/mucommander/deps.json#L1088-L1091