Log4j 2.16.0 was released at 13 Dec 22:28 GMT | Hacker News Reader

Log4j 2.16.0 was released at 13 Dec 22:28 GMT

lists.apache.org

4 pointsnew23d1 comment

log4j 2.16.0 was released at 13 Dec 22:28 GMT with the following note [1]:

  Removed Message Lookups. This is a hardening related to changes made to prevent CVE-2021-44228. While this change is recommended, it is NOT required to fix CVE-2021-44228.

[1] https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0...

Reply on news.ycombinator.com