Announcement

Collapse
No announcement yet.
X
  • Filter
  • Time
Clear All
new posts

    Migrating from log4j1 to log4j2


    Hi, I am migrating my Project from log4j1 to log4j2. Log4j1 is having a vulnerability so we need to get rid of that. can you please help on this. I am using "v121p_2021-10-20"

    Getting below error :

    HTTP Status 500 – Internal Server Error


    Type Exception Report

    Message org.apache.log4j.MDC.clear()V

    Description The server encountered an unexpected condition that prevented it from fulfilling the request.

    Exception

    java.lang.NoSuchMethodError: org.apache.log4j.MDC.clear()V com.isomorphic.log.Log4jLogger.clearMDC(Log4jLogger.java:274) com.isomorphic.log.Logger.clearMDC(Logger.java:623) com.isomorphic.base.InitListener.requestInitialized(InitListener.java:108) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81) org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364) org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624) org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831) org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651) org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) java.lang.Thread.run(Thread.java:748)
    Note The full stack trace of the root cause is available in the server logs.
    Apache Tomcat/8.5.68




    #2
    The widely-reported Log4j 1.0 vulnerability has no impact for SmartClient applications, so there is nothing to fix.

    However, if you have no choice, the simplest thing is to upgrade to 13.1. If you don't do this, you should be using the latest 12.1 during the process, not one 3.5 years (!!) out of date on patches.

    Background (from 13.1 docs):

    https://smartclient.com/smartclient-....serverLogging

    Comment

    Working...
    X