search

oxygenxml / oxygen-batch-converter-addon

Oxygen XML plugin which allows batch resource conversions (Word/Excel/HTML/Markdown to XHTML/DITA or XML<->JSON)
Apache License 2.0
17 stars 11 forks source link

Update Log4j to 2.18 #52

Closed reifsnid closed 2 years ago

reifsnid commented 2 years ago

Hi,

Just wondering if it would be possible to update the add-on to use log4j 2.18?

My company's security team wants all log4j instances on company computers to use version 2.18 as previous versions have reported vulnerabilities.

Thanks!

DunaMariusCosmin commented 2 years ago

Hi, The Batch Documents Converter add-on has no longer distributed the Apache Log4j libraries starting with version 3.2.1. I recommend you update to the latest version if you use an older one.

Now the add-on is based on SLF4J and uses the logging framework that it finds in Oxygen. The last version of Oxygen (24.1) has completely removed log4j and now it users Logback.

Best regards, Cosmin