Hi yes a new release will be there as soon as possible. regards Olivier
On Mon, 13 Dec 2021 at 19:02, Robert Velter <robert.vel...@take3.ro.invalid> wrote: > Hello, > > the current archiva version 2.2.5 contains log4j version 2.8.2. > > This version has a critical RCE bug (CVE-2021-44228) which has been > fixed in version 2.15.0. > > Is there a security update planned soon? > > Best regards, > Robert Velter > > -- > Robert Velter <robert.vel...@take3.ro> > Preşedinte - Asociaţia TAKE3 >
