Hello Mitali,
For one, as clearly indicated in the project page[1], Apache Log4j 1
reached its End-of-Life in 2015 and hence, is not supported by the Apache
Logging Services anymore. It is not just unmaintained, but also subject to
vulnerabilities. We strongly advise you to upgrade to the latest v
Hello Apache Dev Team,
Situation: Both the libraries log4j-1.2.9.jar and log4j-1.2.9-1.0.jar are
getting flagged on the same server.
Question: If possible, I was wondering if you could provide some technical
insight on the difference between both of the libraries.
Moreover, please feel to poin
