Systems and services that use the Java logging library, Apache Log4j between versions 2.0 and 2.14.1 are all affected, including many services and applications written in Java.

Proposed release model for Java software libraries would give application developers a better experience while helping library developers innovate faster, Oracle says. Oracle is touting a “tip ...