[ 
https://issues.apache.org/jira/browse/GEODE-10452?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

PJ Fanning updated GEODE-10452:
-------------------------------
    Description: 
See https://github.com/apache/geode-kafka-connector/pull/20

Is geode-kafka-connector maintained? If not, could it be archived?

It feels wrong for an ASF project to have source that is using log4shell 
affected jars in 2024.

  was:
See https://github.com/apache/geode-kafka-connector/pull/20

Is geode-kafka-connector maintained? If not, could it be archived.

It feels wrong for an ASF project to have source that is using log4shell 
affected jars in 2024.


> geode-kafka-connector uses log4shell affected log4j-core
> --------------------------------------------------------
>
>                 Key: GEODE-10452
>                 URL: https://issues.apache.org/jira/browse/GEODE-10452
>             Project: Geode
>          Issue Type: Bug
>            Reporter: PJ Fanning
>            Priority: Major
>              Labels: needsTriage
>
> See https://github.com/apache/geode-kafka-connector/pull/20
> Is geode-kafka-connector maintained? If not, could it be archived?
> It feels wrong for an ASF project to have source that is using log4shell 
> affected jars in 2024.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to