Zookeeper Log4j-1.X upgrade

[ElangoD]

Hi Team,

OPDK version : 4.51.00

In the recent patched we got patch  release for apigee-configutil
and apigee-gateway rpms have been upgraded to log4j 2.x jars

but, zookeeper logging still in the older version: i.e(opt/apigee/apigee-zookeeper/lib/log4j-1.2.17.jar)

Version:

1. is there any patch release to fix or any near future patch to fix this

2. can we replace this log4j-1.2.17.jar with log4j-2.X download from internet?

Thanks

Elango

[dchiesa1]

---

is there any patch release to fix or any near future patch to fix this

---

No. I guess you mean "future patch to UPDATE this." There is no bug, so we would not say that it needs to be "fixed".

---

can we replace this log4j-1.2.17.jar with log4j-2.X download from internet?

---

No, you must not do that. (It would not work if you did so) Zookeeper works with the 1.2.x version of log4j.

[ElangoD]

Thanks @dchiesa1 understood log4j-1.2.17.jar - this version is not vulnerable  or bug,

But, this version had reached end-of-life on Aug 2015

[Mesun]

We would need to upgrade to latest Jar  as well. For customers are not ready to go with End of life components.