📢 log4j-1.2-bridge is considered to be released to log4j:log4j (yes, Log4j 1!) Maven coordinates to ease the 1-to-2 transition. (1 was EoL'ed in 2015!) We will really appreciate some feedback from users.
We’re considering releasing Log4j2’s compatibility later for v1 as the log4j:log4j Maven artifact to help users more easily upgrade. See lists.apache.org/thread/0hjt… for more details. #Log4j#Log4j2
We’re considering releasing Log4j2’s compatibility later for v1 as the log4j:log4j Maven artifact to help users more easily upgrade. See lists.apache.org/thread/0hjt… for more details. #Log4j#Log4j2
Due to continued interest in users staying on end of life software, we've just published more CVEs that affect #Log4j 1.x which were reported after the EOL date. Users are encouraged to upgrade to Log4j 2.x where all these issues (and more) are fixed. See
logging.apache.org/log4j/1.2…
Today the ASF participated in the White House Open Source Security Summit. Here's our statement on the summit, and we look forward to participating in the follow on conversations that this effort inspired.
blogs.apache.org/foundation/…
The Apache Logging Services PMC has decided to reconfirm the end of life status of Log4j 1.x. Details in the log4j1 README: github.com/apache/logging-lo…