Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to latest log4j 2.x version #579

Closed
ndoschek opened this issue Mar 10, 2022 · 0 comments · Fixed by eclipse-glsp/glsp-server#163
Closed

Update to latest log4j 2.x version #579

ndoschek opened this issue Mar 10, 2022 · 0 comments · Fixed by eclipse-glsp/glsp-server#163
Assignees
Labels
enhancement New feature or request server-java
Projects
Milestone

Comments

@ndoschek
Copy link
Contributor

Upgrade all log4j dependencies due to the recent logj zero-day issues.
Version 1.x is no longer maintained and the Eclipse Foundation recommends to upgrade.
Version 2.17.1 is available with Eclipse release 2022-03

@ndoschek ndoschek added enhancement New feature or request server-java labels Mar 10, 2022
@ndoschek ndoschek added this to the 1.0.0 Release milestone Mar 10, 2022
@ndoschek ndoschek added this to New in GLSP kanban via automation Mar 10, 2022
@planger planger moved this from New to To do in GLSP kanban Mar 24, 2022
@ndoschek ndoschek moved this from To do to In progress in GLSP kanban May 2, 2022
ndoschek added a commit to eclipse-glsp/glsp-server that referenced this issue May 4, 2022
- Update to org.apache.logging.log4j version 2.17.1
  - Migrate dependencies to log4j2
  - Migrate usage of logger to log4j2 and align naming to LOGGER
  - Migrate log configuration and introduce rolling log file policy
- Update target platform to latest 2022-03 release
- Adapt fatjar build
  - Setup fatjar to use multi-release jars to overcome logging issues while jar execution
  - Fix warnings related to overlapping classes during fatjar generation
- Ensure logging is configured for all server use cases on startup
  - Provide start methods to allow easier log configuration
- Add Log4j2Logger redirection for jetty server in case of websocket server usage
  - This is a copy from the org.apache.logging.log4j/log4j-appserver module, as this is not available as plugin.
- Improve help text for CLI usage
  - Add short program arguments for single letter argument usage
- Fix fragment host version for org.eclipse.glsp.graph.test in manifest file
- Update README

Resolves eclipse-glsp/glsp#579
GLSP kanban automation moved this from In progress to Done May 5, 2022
ndoschek added a commit to eclipse-glsp/glsp-server that referenced this issue May 5, 2022
- Update to org.apache.logging.log4j version 2.17.1
  - Migrate dependencies to log4j2
  - Migrate usage of logger to log4j2 and align naming to LOGGER
  - Migrate log configuration and introduce rolling log file policy
- Update target platform to latest 2022-03 release
- Adapt fatjar build
  - Setup fatjar to use multi-release jars to overcome logging issues while jar execution
  - Fix warnings related to overlapping classes during fatjar generation
- Ensure logging is configured for all server use cases on startup
  - Provide start methods to allow easier log configuration
- Add Log4j2Logger redirection for jetty server in case of websocket server usage
  - This is a copy from the org.apache.logging.log4j/log4j-appserver module, as this is not available as plugin.
- Improve help text for CLI usage
  - Add short program arguments for single letter argument usage
- Fix fragment host version for org.eclipse.glsp.graph.test in manifest file
- Update README

Resolves eclipse-glsp/glsp#579

* Import packages org.apache.logging.log4j.* instead of required bundle

* Update README.md

Co-authored-by: Philip Langer <planger@eclipsesource.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request server-java
Projects
No open projects
GLSP kanban
  
Done
Development

Successfully merging a pull request may close this issue.

1 participant