Martijn Visser created FLINK-25472:
--------------------------------------
Summary: Update to Log4j 2.17.1
Key: FLINK-25472
URL: https://issues.apache.org/jira/browse/FLINK-25472
Project: Flink
Issue Type: Technical Debt
Reporter: Martijn Visser
Assignee: Martijn Visser
Fix For: 1.15.0, 1.13.6, 1.14.3
We should update from Log4j 2.17.0 to 2.17.1 to address CVE-2021-44832: Apache
Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
