[LOG4J2-3222] Documentation at https://logging.apache.org/log4j/2.x/ has obsolete references to 2.15.1

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.16.0

Environment

See https://logging.apache.org/log4j/2.x/:

News

Log4j 2.15.1 has been released solely to disable access to JNDI by default. The CVE noted below was fixed in the 2.15.0 release. 2.15.1 is NOT a required upgrade but users may choose to use it to have confidence that JNDI will not be abused.

• Assignee: Matt Sicker
• Reporter: Daniel Kirkdorffer
• Created: 14/Dec/21 05:43
• Updated: 15/Dec/21 23:04
• Resolved: 14/Dec/21 06:04

Description

There is language in the documentation that refers to "2.15.1" which became "2.16.0".

This could cause confusion.