druid 依赖 log4j 1.x，会受到漏洞影响吗？

This topic created in 1619 days ago, the information mentioned may be changed or developed.

不知道为啥 druid 到现在还依赖这个，也不能去掉，有影响吗？

4 replies • 2021-12-16 14:15:58 +08:00

1

2i2Re2PLMaDnghL

Dec 16, 2021

1.x 不会受 44228 影响

via <https://logging.apache.org/log4j/2.x/security.html>
> Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1

2

Finest

Dec 16, 2021

是阿里的连接池 druid ，还是大数据的 druid

3

ciki

OP

Dec 16, 2021

@hand515 阿里

4

ciki

OP

Dec 16, 2021