How to remediate log4j 1.2.16 in Jira Server 7.7.1

DavidEBelanger

We need to get rid of log4j version 1.2.16 from our Jira 7.7.1 Jira Server. We don't have time right now to consider upgrading our Jira version. It's recommended that we move to log4j version 2.17.1. I was told that there is a change in the java package structure, so we can't just substitute the newer log4j.

Does anyone know what we can do? 

 

Nic Brough -Adaptavist-

Welcome to the Atlassian Community!

You can't just drop in an untested library and hope it's going to work, especially if it's a newer major release version.  It is going to fail.

Your only realistic option is an upgrade.