Use this to change all Ondex modules so that:
- They depend on log4j-api-2
- They also depend on log4j-1.2-api, which will reroute all Log4j v1 to version 2 (ie, to the API above)
- Same for slf4j and common logging (TODO: link to bridges), but Log4j v1 is a priority
- Modules that use a concrete implementation of any logger, migrate to log4j-core as their implementation
(so that all of the above is re-routed).
- This also requires that the log4j.xml files are migrated to v2 (YAML flavour preferrable)
- A good way to deal with the config files is downloading them from a single place (like the data module)
This is to address the recent security issues discovered with old Log4j. It has not a very high priority, since said issues are relevant only for web servers, yet, the migration above would remove many warnings triggered by dependabots and IT people.
Use this to change all Ondex modules so that:
(so that all of the above is re-routed).
This is to address the recent security issues discovered with old Log4j. It has not a very high priority, since said issues are relevant only for web servers, yet, the migration above would remove many warnings triggered by dependabots and IT people.