conduktor.io ↗

KIP-653 — Upgrade log4j to log4j2

Accepted Kafka 4.0 Broker

Replaces the log4j 1.x dependency on the Kafka broker/server side with log4j2 (2.x) and its corresponding SLF4J bindings. Log4j 1.x reached end-of-life in 2012, exposes known CVEs (e.g., CVE-2019-17571), and forces operators to use an obsolete configuration format unfamiliar to most users who know log4j2 syntax.

Details

AuthorDongjin Lee
StatusAccepted
Kafka Version4.0
JIRAKAFKA-9366
WikiView on Apache Wiki
Created2020-08-05
Last Modified2024-11-19
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.