How can we update the Log4j 1.x version to Log4j 2.x on window Host?

Sawant, Pritesh 0 Reputation points
2023-05-03T17:00:27.64+00:00

Log4j installed by default during installation of SQL 2017 & it's found at C:\Program Files\Microsoft SQL Server\150\DTS\Extensions\Common\Jars\log4j-1.2.17.jar location.

Installed version : 1.2.17

According to its self-reported version number, the installation of Apache Log4j on the remote host is no longer supported. Log4j reached its end of life prior to 2016.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

Windows for business | Windows Server | User experience | Other
Windows for business | Windows Server | Devices and deployment | Configure application groups
SQL Server | Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-05-04T02:45:18.51+00:00

    Hi @Sawant, Pritesh

    Microsoft has published information on this issue, which you can refer to this document: https://msrc.microsoft.com/blog/2021/12/microsofts-response-to-cve-2021-44228-apache-log4j2/

    But updating Log4j is not directly related to Microsoft, but to Apache, and you can get more information from the Apache site: https://logging.apache.org/log4j/2.x/

    For more details, you can refer to this link: https://learn.microsoft.com/en-us/answers/questions/707615/updating-apache-log4j-on-sql-2019-installations.

    Best regards,

    Aniya

    0 comments No comments

  2. John Barrett 0 Reputation points
    2024-03-14T15:54:30.1166667+00:00
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.