[LOG4J2-3224] Log4j 2.13.0

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Information Provided
• Affects Version/s: 2.13.0
• Fix Version/s: 2.15.0
• Component/s: Build
• Assignee: Unassigned
• Reporter: Edmondo Sena
• Created: 14/Dec/21 09:45
• Updated: 17/Jan/22 20:08
• Resolved: 17/Jan/22 20:08

Description

Given the vulnerabilities of Log4j 2.13.0, does the switch to log4j 2.15.0 have severe design impacts or is it painless? Is version 2.15.0 okay or is version 2.16.0 required?

Thanks