A prerequisite for the next Axis2 release was Axiom 1.4.0 and that release was just completed today ... should hit the Maven repos later today or tomorrow.
Axis2 should be following up soon - I'm guessing next week though since we are all volunteers it is hard to say with certainty. On Mon, May 23, 2022 at 3:44 AM Avi Varma <avi.va...@microfocus.com> wrote: > Hi, > > > > I can see on Maven repository that Axis2 1.8.1 is vulnerable to the Log4j > 2 RCEs. Is there a rough date on when a version of axis2 with the log4j > patch will be available? > > > > Thanks, > > > > Avi Varma >
