log4j Fix for PeopleTools
Running PT 8.57.12 and the recommended fix for log4j from Oracle is to remove the class file, however shouldn't we also upgrade the log4j version to the recommended version provided under Java 8? My concern is applying a log4j version update outside of the PT upgrade. I know we are fine if the Java version was v6 or v7 but our ITRM team has additional concerns with this type of fix for Java 8. Anyone else facing challenges with just removing a class file from the log4j jar file? We are moving forward with the class removal.