'Zookeeper - Due Date for Log4J Upgrade

Log4J version (1.x) used by Apache Zookeeper exposes users to the following CVE-s:

Critical -

  1. CVE-2019-17571
  2. CVE-2022-23305
  3. CVE-2022-23307

High -

  1. CVE-2022-23302
  2. CVE-2021-4104

Low -

  1. CVE-2020-9488

When (on which release) will Zookeeper be upgraded to the latest Log4J release? is there a workaround? Thanks.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source