Version 5.17 hasn't even been released yet so it's not possible to say what exact version of Log4j it will be using. As noted on the website [1] and in this PR [2] 5.17 *will* be using Log4j 2.x.
Justin [1] https://activemq.apache.org/news/cve-2021-44228 [2] https://github.com/apache/activemq/pull/662 On Mon, Jan 3, 2022 at 9:07 AM Laurent Blanquet <lblanq...@b2btechno.net> wrote: > Hi Guys, > > It seems that the latest version available is still using log4j 1.2.17. > > Unfortunately we have a customer who has a strong requisite to migrate to > log4j2 before 10 of January ! > > Is there a (simple) mean to force this version (or 5.16.3 ?) to use log4j > 2.17 ? > > Regards, > > Laurent >