Peter Somogyi created HBASE-26570:
-------------------------------------

             Summary: Upgrade to log4j 2.16.0
                 Key: HBASE-26570
                 URL: https://issues.apache.org/jira/browse/HBASE-26570
             Project: HBase
          Issue Type: Umbrella
          Components: dependencies, hbase-operator-tools
            Reporter: Peter Somogyi
            Assignee: Peter Somogyi


Log4j just release version 2.16.0 where jndi is turned off by default. Based on 
the release announcement it is not required to fix CVE-2021-44228 but 
recommended. 

[https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to