jcrodriguez-dis / vpl-jail-system

Execution/jail server for VPL
GNU General Public License v3.0
23 stars 22 forks source link

Upgrade Apache Log4j #51

Closed chyrka closed 2 years ago

chyrka commented 2 years ago

Is it possible to upgrade Apache Log4j to the latest version because current installed version is Unsupported?

Path : /jail/usr/share/maven-repo/org/apache/ant/ant-apache-log4j/1.10.7/ant-apache-log4j-1.10.7.jar Installed version : 1.10.7

Path : /jail/usr/share/java/ant-apache-log4j-1.10.7.jar Installed version : 1.10.7

Path : /usr/share/java/ant-apache-log4j-1.10.7.jar Installed version : 1.10.7

Path : /usr/share/maven-repo/org/apache/ant/ant-apache-log4j/1.10.7/ant-apache-log4j-1.10.7.jar Installed version : 1.10.7

jcrodriguez-dis commented 2 years ago

Dear chyrka, The vpl-xmlrpc-jail software does not use or depend on log4j, feel free to update or remove log4j from your server. Remember to restart the vpl-xmlrpc-jail service to update the changes in the jail.

jeroenhabets commented 2 years ago

@chyrka can you close this issue, pls? TIA