This patch releases updates the version of Log4j used in OpenSearch to Log4j 2.16.0 as recommended by the advisory in CVE-2021-45046.
- Increment version to 1.2.2 and backport log4j upgrade to 2.16. (#1728)
- Bumping log4j to 2.16.0 (#1525)
This patch releases updates the version of Log4j used in OpenSearch to Log4j 2.16.0 as recommended by the advisory in CVE-2021-45046.