log4j version and implementation in yajhfc.jar

[gmed-ed]

Within \yajhfc\org\apache\commons\logging\impl there ist a Log4JLogger.class

I'm not a developer so i cannot say, wether this is a problem or not.
Maybe one could give some information about usage in YAJHFC

thanks in advance

[jwolz]

YajHFC does not use log4j.

The class you mentioned is from Apache Commons Logging, where log4j is one possible logging backend.
YajHFC does not use this, however.

For logging it uses the logging included in the JDK which is not affected by the log4j vulnerability.

[gmed-ed]

Thank you for clearing

have a good time