[NIFI-9534] Upgrade Log4j 2 API to 2.17.1

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.2
• Fix Version/s: 1.16.0, 1.15.3
• Component/s: Extensions
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 04/Jan/22 20:27
• Updated: 05/Jan/22 14:27
• Resolved: 05/Jan/22 14:26

Description

Several extension components leverage the Log4j 2 log4j-api and log4j-to-slf4j libraries. Although these components are not subject to the same security concerns as log4j-core, upgrading to version 2.17.1 mitigates potential false positives.

Issue Links

• links to: GitHub Pull Request #5629