We need to update $ORACLE_HOME/oracle_common/modules/thirdparty/log4j-2.11.1.jar with correct version of log4j inside the manifest file which is 2.17.1 to avoid any confusion for security scanning application.
Hi,
Can you please share some more details on the product for which you are looking for this enhancement?
Thanks.
Sorry for following up late as I did not see the comment. Our Security team wants the file name
$ORACLE_HOME/oracle_common/modules/thirdparty/log4j-2.11.1.jar to be
$ORACLE_HOME/oracle_common/modules/thirdparty/log4j-2.17.1.jar as it is using 2.17.1 version not 2.11.1 version.