Log4j vulnerability - hotfix?

[Eyal Yurman]

Hello, regarding https://github.com/apache/druid/pull/12051 which merged to
master,

Is it a common practice for the project to backport and release a new minor
for the latest version?