Yesterday, the Apache Logging team announced the availability of version 1.2.17 of log4j, which is the first new update of log4j in a little over two years. First released in May of 2002 (Happy 10 Year Anniversary?), log4j is a popular java logging library used by many applications and application servers over the years.
Labeled as a maintenance release, the changelog lists 8 fixes and downloads are available from the Apache Logging Services log4j download page. Please note that as of the time of this post, the link to the changelog on the log4j page doesn't work—use my link above.