# Release of Vitess v12.0.3
## Announcement

This patch is providing an update regarding the Apache Log4j security vulnerability ([CVE-2021-44832](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832)) (#9465).

 ------------
## Changelog

### Dependabot
#### Java
* build(deps): bump log4j-api from 2.16.0 to 2.17.1 in /java #9465


The release includes 4 commits (excluding merges)

Thanks to all our contributors: @dbussink, @frouioui