Hello Jason, No release is planned for 0.10.2. --Bipin
On 2022/04/06 15:16:46 Jason Tan wrote: > Hi Apache Storm team, > I noticed there is a release for Storm 2.4 which fixes the log4j > CVE-2021-44228 + CVE-2021-45046.Also noted that fixed versions for the CVEs > include Storm 2.4.0, 2.3.1, 1.2.5, 2.2.2, 2.1.2. > Unfortunately we are using Storm 0.10.2. Can I check if there is / will be a > official fix for Storm 0.10.x for the CVEs mentioned? > Thanks in advance
