[NIFI-9482] Upgrade Log4j 2 to 2.16.0

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.1
• Fix Version/s: 1.16.0, 1.15.1
• Component/s: Extensions
• Labels: security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 13/Dec/21 20:57
• Updated: 14/Dec/21 00:41
• Resolved: 13/Dec/21 21:25

Description

Log4j 2.16.0 incorporates additional security measures, disabling JNDI lookups by default as described in LOG4J-3208.

Issue Links

• is related to: NIFI-9474 Upgrade Log4j 2 to 2.15.0
• links to: GitHub Pull Request #5600