Re: [Exist-open] log4j2 vulnerability

[Dannes W. <di...@ex...>]

For 471 it is possible to just replace jars ;
For 5x it is more complex 

> On 15 Dec 2021, at 16:48, Josef Wetzel UL via Exist-open <exi...@li...> wrote:
> 
> - Replace the actual jars of log4j2 with the jars of log4j2 version 2.16, can I simply replace these jars in an eXist-db-install (e.g. eXist-db-4.7.1)?