英文:
Apache Kafka v. 2.1.1 and log4j latest v 2.17
问题
我们在将log4j从1.2.17升级到2.17以避免Log4j引起的漏洞时，在Zookeeper中遇到了问题。升级后，Zookeeper无法启动，并且移除了旧的log4j jar文件，因此我们需要知道建议升级到哪个版本的Apache Kafka。
我们简单地移除了旧的jar文件，并将其替换为libs目录中新安装的log4j和SLF4j的最新jar文件，但这并没有解决问题。
英文:
We encountered a problem in Zookeeper when upgrading log4j from 1.2.17 to 2.17 in order to avoid a vulnerability caused by Log4j.
The zookeeper is not starting with the upgraded version and removing the old jar file of the old log4j, so we need to know what version of Apache Kafka is recommended that I upgrade to.
We simply removed the old jar file and replaced it with the newly installed latest jar files for log4j and SLF4j in the libs directory, but this did not resolve the problem.
答案1
得分: 0
最新版本的Kafka和Zookeeper已经通过迁移到reload4j来解决了log4j的问题。请升级它们，按照它们自己的升级和发布说明进行操作。
由于这两个项目都未使用log4j2库进行编译，因此不能简单地替换日志jar文件并期望一切继续工作。
英文:
Latest Kafka and Zookeeper already have addressed log4j issues by migrating to reload4j. Upgrade those instead, following their own upgrade and release notes
You cannot simply replace logging jar files and expect anything continue to work, as neither project is compiled with log4j2 libraries
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论