[MRM-2025] Update to log4j 2.16.0 (CVE-2021-45046)

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.2.6
• Component/s: Audit Logging
• Assignee: Unassigned
• Reporter: Robert Velter
• Created: 16/Dec/21 08:36
• Updated: 16/Dec/21 19:34
• Resolved: 16/Dec/21 19:34

Description

log4j 2.15.0 is not enough to fully mitigate CVE-2021-44228.

See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046 

Best regards, Robert

Issue Links

• duplicates: MRM-2024 Switch to log4j2 2.16.0