https://bugzilla.redhat.com/show_bug.cgi?id=2030932
--- Comment #79 from Chess Hazlett chazlett@redhat.com --- Marking Red Hat EAP-XP 3 as not affected; the product does not directly ship log4j, but consumes artifacts from base EAP.
java-sig-commits@lists.fedoraproject.org