FYI. the page https://logging.apache.org/security.html does not use the string "log4jshell" anywhere, no wonder we don't come up on the first Google page when searching for it. If I google "log4jshell apache", it's a little better with our security page in the middle of the first page.
Gary
