Apache Log4j 2.17.1 Vulnerability Hotfixes

As per the pega documentation to receive Apache Log4j 2.17.1 Vulnerability Hotfix we need to be on 8.4.6 version.

Currently we are on 8.4.0 and already applied Log4j 2.17 hotfix. Can we get hotfix for Log4j 2.17.1 without upgrading to 8.4.6 version ?

@srinivasur6711 yes you need to be on the latest version,

"… Pega’s Log4j 2.17.1 hotfixes will only be available for the latest patch release of each Pega Platform version, and clients must evaluate whether they require this fix. Clients who are on prior patch versions must upgrade to the latest patch version in order to receive and apply this hotfix, or they must apply a 2.17 hotfix from the Apache Log4j 2.17 Vulnerability Hotfixes Advisory. "

This is as per the article:

https://collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-pega-platform-apache-log4j-2171-vulnerability-hotfixes

@MarijeSchillern

sounds good.