[ https://issues.apache.org/jira/browse/JDO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Bouschen reopened JDO-800: ---------------------------------- The fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations, see CVE-2021-45046 for details. We should update log4j to 2.16.0. > Update Log4j Version > -------------------- > > Key: JDO-800 > URL: https://issues.apache.org/jira/browse/JDO-800 > Project: JDO > Issue Type: Improvement > Components: tck > Affects Versions: JDO 3.2 > Reporter: Michael Bouschen > Assignee: Michael Bouschen > Priority: Major > Fix For: JDO 3.2 > > > Log4j Versions up to 2.14.1 have a security finding CVE-2021-44228. > Update log4j to version 2.15.0 -- This message was sent by Atlassian Jira (v8.20.1#820001)