search

clarin-eric / VLO

Virtual Language Observatory
GNU General Public License v3.0
14 stars 6 forks source link

Migrate logging to log4j 2.x or logback #324

Closed twagoo closed 1 year ago

twagoo commented 3 years ago

The latest version for log4j 1.x has known vulnerabilities that we cannot expect to be addressed (v1.x is officially out of maintenance). Since we use slf4j, all we should need to do is switch the binding and migrate the log configurations.

twagoo commented 3 years ago

Log4j2 seems to be the better choice.

Migration guide from log4j 1.x

twagoo commented 1 year ago

Since VLO 4.10.2 logging has been upgraded to log4j 2.x