Hello Pax Logging 1.10.8 has been released with Log4j2 upgrade to version 2.12.2.
This is the version with CVE-2021-44228 fixed for people that still use JDK 7. Normally, Pax Logging 1.10.x is no longer maintaned (only 1.11.x and 2.0.x branches are for now), but for this CVE we've made an exception ;) The changelog is available at GitHub: https://github.com/ops4j/org.ops4j.pax.logging/milestone/77?closed=1 kind regards Grzegorz Grzybek
