[
https://issues.apache.org/jira/browse/NIFI-9482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17458727#comment-17458727
]
ASF subversion and git services commented on NIFI-9482:
-------------------------------------------------------
Commit 1321b25f6670fb96e3e75076addb6fbe7e691c84 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=1321b25 ]
NIFI-9482 This closes #5600. Upgrade Log4j 2 from 2.15.0 to 2.16.0
Signed-off-by: Joe Witt <[email protected]>
> Upgrade Log4j 2 to 2.16.0
> -------------------------
>
> Key: NIFI-9482
> URL: https://issues.apache.org/jira/browse/NIFI-9482
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Affects Versions: 1.15.1
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Labels: security
> Fix For: 1.16.0, 1.15.1
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Log4j 2.16.0 incorporates additional security measures, disabling JNDI
> lookups by default as described in LOG4J-3208.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
