Eclipse SDK 3.6 using insecure Log4J - any updates available?

[Former Member]

Certain agencies in the U.S. Government are prohibiting the installation of Log4J 1.X,  which is included in the 3.6 Eclipse SDK.  Version 2.X of Log4J  is approved for use.  Are there any updates that address this?  If not,  are there plans to update the Log4J version?

[former_member11696]

Hi Kevin,

Can you tell me what the issue is with 1.x? If there is a valid Business Case to upgrade I'll forward your request to our Product Owners.

Thank you

Don