from Hacker News

Log4j 2.16.0 was released at 13 Dec 22:28 GMT

by new23d on 12/14/21, 8:29 AM with 1 comments

• by new23d on 12/14/21, 8:30 AM

  log4j 2.16.0 was released at 13 Dec 22:28 GMT with the following note [1]:

    Removed Message Lookups. This is a hardening related to changes made to prevent CVE-2021-44228. While this change is recommended, it is NOT required to fix CVE-2021-44228.
  

  [1] https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0...