Since GeoServer uses log4j2. Involved versions are from 2.21.0 on.
GeoFence log4j libs are being updated (see ).
GeoServer 2.23.x relies on GeoFence 3.6.0, so we’ll create a new 3.6.1 release for GeoFence.
GeoServer 2.24.0 and 2.25 (main) rely on 3.7-RC (not tagged anywhere?), so the idea is to fix the log4j deps and
create a 3.7.1 GF version for the GS 2.24 branch
use the 3.7.x branch for GS main
Since GeoServer uses log4j2. Involved versions are from 2.21.0 on.
GeoFence log4j libs are being updated (see ).
GeoServer 2.23.x relies on GeoFence 3.6.0, so we’ll create a new 3.6.1 release for GeoFence.
GeoServer 2.24.0 and 2.25 (main) rely on 3.7-RC (not tagged anywhere?), so the idea is to fix the log4j deps and
create a 3.7.1 GF version for the GS 2.24 branch
use the 3.7.x branch for GS main