Jamf Nation Community

ostrowsp, I have overlooked the "or later" detail in the official doc. I will just go ahead and update to 2.16.0.

rmday, good point. Thank you for that.spotmac, good point as well. Thank you.I'm just weighing my options at this point. I'm already on version 10.34.1 which uses log4j-core-2.15.0.jar. So CVE-2021-44228 should be covered.As for CVE-2021-45046, the o...

I just found this:https://community.jamf.com/t5/jamf-pro/third-party-security-issue/m-p/253740Looks like CVE-2021-45046 is not an issue.

@spotmacare you saying that you've replaced:log4j-1.2-api-2.15.0.jarlog4j-api-2.15.0.jarlog4j-core-2.15.0.jarlog4j-slf4j-impl-2.15.0.jarwithlog4j-1.2-api-2.16.0.jarlog4j-api-2.16.0.jarlog4j-core-2.16.0.jarlog4j-slf4j-impl-2.16.0.jarand Jamf Pro 10.34...