Solr 8.11.1 upgrading LOG4J from 2.16 to 2.17

[Heller, George A III CTR (USA)]

I have seen the emails about Solr not being affected by the DoS vulnerability 
associated by LOG4J 2.16, but SOLR failed a security scan because of it and the 
bosses want it upgraded.

 

Can someone tell me where I can download an upgrade or patch for LOG4J and 
instructions on how to implement it?

 

Thanks,

George

 

 

smime.p7s
Description: S/MIME cryptographic signature