Log4j latest security updates

Neo4j Graph Platform Operations
1

Hi,
I am using Neo4J 4.3.9 Community. It has been updated to use log4j 2.16.0.
I would like to know if there is a date set for a release which upgrades log4j to 2.17.x?
I have seen the update on this page (Apache Log4j Security Vulnerability) Which says the following:

"We are working towards upgrading to the latest version of Log4j (2.17.0) and targeting to release within the priority-based remediation timeframes that are outlined in Neo4j vulnerability management policy."

...but I was wondering if there is a specific date set yet.

I am aware of the mitigations described etc.

Thanks a lot.

2

please see Apache Log4j Security Vulnerability for our current update on said vulnerabilities

3

Thanks for the reply. I was hoping to get a specific date for the release, but I guess that is not available yet.

4

@geoghegk

4.4: Neo4j 4.4.3 - Neo4j Graph Data Platform
4.3 Neo4j 4.3.10 - Neo4j Graph Data Platform