Zookeeper has not yet migrated to log4j2. Even their latest releases (3.6.3, 3.7.0) are still using version 1.2.17 of log4j.
So I would think that Zookeeper would be in the same situation as the pre-7.4.0 Solr releases as described here: https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228 So I guess the question is whether Zookeeper uses the JMS Appender? - Andy - On Mon, Dec 13, 2021 at 9:30 AM Andy Lester <a...@petdance.com> wrote: > > > > On Dec 13, 2021, at 8:20 AM, Michael Conrad <mich...@newsrx.com> wrote: > > > > I presume this also needs fixing for zookeeper nodes? > > Anything that logs with log4j.
