Categorization: Unclassified Hi: What version of log4j is included in Lucene version 8.11.2? The release notes for Solr 8.11.2 explicitly states log4j version is upgraded to 2.17.2 to address security vulnerabilities, but there is no such note for Lucene. I assume the same is true for Lucene 8.11.2 since Solr is a subproject, but I need it confirmed.
I am trying to get Lucene 8.11.2 certified for use in my organization but certification is contingent on Lucene using log4j 2.17.2. A prompt reply would be greatly appreciated. Thanks, Fred Kurz
