ICEfaces-EE
  1. ICEfaces-EE
  2. IPCK-569

Remove legacy dependencies on log4j library

    Details

    • Type: Improvement Improvement
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: EE-3.3.0.GA, EE-4.3.0.GA
    • Fix Version/s: EE-3.3.0.GA_P10
    • Component/s: Project Templates, Release
    • Labels:
      None
    • Environment:
      ICEfaces EE

      Description

      The ICEfaces EE 3.3.0.GA and EE 4.3.0.GA bundles currently include references to the Apache log4j 1.x library.

      This JIRA is to review log4j's usage in these bundles and remove if feasible to reduce exposure to any possible log4j exploit concerns.

        Activity

        Ken Fyten created issue -
        Ken Fyten made changes -
        Field Original Value New Value
        Fix Version/s EE-3.3.0.GA_P10 [ 13878 ]
        Ken Fyten made changes -
        Security Private [ 10001 ]

          People

          • Assignee:
            Ken Fyten
            Reporter:
            Ken Fyten
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated: