apache / apache/parquet-java

Replace log4j1 with reload4j

Open
#2,737 2 comments 0 reactions 0 assignees View on GitHub
Component: Parquet Priority: Major Type: enhancement
Dominant language
Java
Stars
3.1k
Forks
1.6k
Avg merge
3d 12h
Merged PRs (30d)
33

Description

Due to multiple CVE in log4j1, replace log4j dependency with reload4j.

More about reload4j: https://reload4j.qos.ch/

**Reporter**: [Akshat Mathur](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=akshatm)

**Note**: *This issue was originally created as [PARQUET-2239](https://issues.apache.org/jira/browse/PARQUET-2239). Please see the [migration documentation](https://issues.apache.org/jira/browse/PARQUET-2502) for further details.*

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the reload4j website and the linked migration documentation, then locate where parquet-java declares and uses the log4j dependency. Done means the log4j dependency has been replaced with reload4j and the project remains functional.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.