[AMQ-8433] Request for a formal response from Active MQ regarding Log4j vulnerability against CVE-2021-44228

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Information Provided
• Affects Version/s: 5.15.15
• Component/s: Documentation
• Assignee: Unassigned
• Reporter: Imran Ali
• Created: 13/Dec/21 22:24
• Updated: 14/Dec/21 21:04
• Resolved: 14/Dec/21 21:04

Description

Hi Guys, 

Active MQ is still using Log4j v1 and although its not directly impacted by the vulnerability CVE-2021-44228 we are getting follow up questions from the customers on what is the formal timeline for Active MQ to transitioned to the latest version of log4j.

Can you please let us know what are the plans regarding this.