Profile

Been using 9.1 CE for over a year, but recently decided to move to Azure cloud, so installed the latest version 9.3. Configured everything the same, and for the most part it works fine, but every now and then I get a long load time when refreshing a CDE dashboard or simply trying to edit a dashboard ...

I do agree that there is a 2.8.2 version in pax-logging-log4j2-1.10.2.jar file.  I did not catch this at first.  Unfortunately, our security team requires us to have an officially supported fix from the vendor.  Any update would be appreciated.  We are going to have to un-install our Pentaho product ...

We are also using community edition (9.1), but from everything I can tell, the original poster is correct in that Pentaho uses 1.x version, which I don't believe is affected by this weekend's log4j vulnerability.  I read up a little on it (not an expert on this btw), and I could not find the classes ...