SECURITY NOTICE: Log4j.2.x NEWS