We have examined all of our source code and have found no evidence that Panther uses any version of Apache's Log4j logging facility directly, nor is Log4j shipped with any Panther product. For our XMLink customers, XMLink uses only the java.util.logging package for logging.
Some Java code provided by Panther in Panther JCO Application Server and in Panther Web Application Broker's Requester Servlet uses the java.util.logging package instead, which comes with the JRE. Other Java code in Panther uses custom native methods in order to perform logging.
Be aware, however, that any Java Runtime Environment (JRE) can be configured to use Log4j indirectly by Java code that is merely using the JRE's built-in java.util.logging package. In particular, for Panther products in which Panther provides Java code that runs within a servlet, EJB, or other Java component that is used within a JEE Application Server or Web Server, including Apache Tomcat and TomEE, we believe it is possible for those servers products to be configured to use Log4j in such a way that some logging performed by Panther's Java code is directed through a Log4j Logger.
