Log4j 2.16.0 was released at 13 Dec 22:28 GMT (opens in new tab)

(lists.apache.org)

4 pointsnew23d4y ago1 comments

1 comments

1 comments · 1 top-level

log4j 2.16.0 was released at 13 Dec 22:28 GMT with the following note [1]:

  Removed Message Lookups. This is a hardening related to changes made to prevent CVE-2021-44228. While this change is recommended, it is NOT required to fix CVE-2021-44228.

[1] https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0...

j / k navigate · click thread line to collapse