Is log4j 1.x supported in JBoss EAP? It has been discontinued by Apache.
Issue
- The Apache page says that log4j 1.x is not supported anymore. Is this a problem?
- Our security team has flagged log4j v1.x as a vulnerability since it has not been maintained by Apache since 2016. Unfortunately instances of log4j v1.x are in JBoss install directories.
Environment
- Red Hat JBoss Enterprise Application Platform 7.x
- Red Hat JBoss Enterprise Application Platform 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.