[jira] [Created] (HIVE-25797) log4j2 has a critical RCE vulnerability CVE-2021-44228

[Brahma Reddy Battula (Jira)]

Brahma Reddy Battula created HIVE-25797:
-------------------------------------------

             Summary: log4j2 has a critical RCE vulnerability CVE-2021-44228
                 Key: HIVE-25797
                 URL: https://issues.apache.org/jira/browse/HIVE-25797
             Project: Hive
          Issue Type: Bug
          Components: Logging, Security
    Affects Versions: 3.1.2
            Reporter: Brahma Reddy Battula


Impacted log4j version: Apache Log4j 2.x <= 2.14.1
I found that our current log4j version at master is 2.14.1.
Should upgrade the version to 2.15.0



--
This message was sent by Atlassian Jira
(v8.20.1#820001)