[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[AWIPS #RPH-347199]: log4j question

This archive contains answers to questions sent to Unidata support through mid-2025. Note that the archive is no longer being updated. We provide the archive for reference; many of the answers presented here remain technically correct, even if somewhat outdated. For the most up-to-date information on the use of NSF Unidata software and data services, please consult the Software Documentation first.

  • Subject: [AWIPS #RPH-347199]: log4j question
  • Date: Tue, 17 Oct 2023 10:25:01 -0500
You can take a look at the forum when I brought this issue was up to NOAA/NWS: 
https://vlab.noaa.gov/group/awips-community/forums/-/message_boards/view_message/19463328

The AWIPS Information System Security Officer said back in 2022 (which was when 
v18 was already out):

"Log4j was replaced by Logback several versions of AWIPS ago. It is not 
supposed to be part of the baseline, and users should not be using it in local 
applications. We are going to be running scans shortly to detect where log4j 
might be lurking (regardless of version)." 


Thanks,

Tiffany Meyer
AWIPS Lead Software Engineer
UCAR-Unidata

If you're interested, please feel free to fill out a survey about the support 
you receive:  
https://docs.google.com/forms/d/e/1FAIpQLSeDIkdk8qUMgq8ZdM4jhP-ubJPUOr-mJMQgxInwoAWoV5QcOw/viewform

Ticket Details
===================
Ticket ID: RPH-347199
Department: Support AWIPS
Priority: Normal
Status: Open
===================
NOTE: All email exchanges with Unidata User Support are recorded in the Unidata 
inquiry tracking system and then made publicly available through the web.  If 
you do not want to have your interactions made available in this way, you must 
let us know in each email you send to us.