DMN TCK project and Log4Shell CVE-2021-44228

[tarilabs]

TL;DR: DMN TCK should not be impacted by Log4Shell CVE-2021-44228

Just for for note, we use Log4j 1.x binding for SLF4J only, here:

tck/runners/dmn-tck-validation/pom.xml

Lines 24 to 29 in bcd0576

	<dependency>
	<groupId>org.slf4j</groupId>
	<artifactId>slf4j-log4j12</artifactId>
	<version>1.7.7</version>
	<scope>test</scope>
	</dependency>

ref:
http://slf4j.org/log4shell.html#:~:text=Thus%2C%20if%20your%20SLF4J%20provider/binding%20is%20slf4j%2Dlogj12.jar%2C%20you%20are%20safe%20regarding%20CVE%2D2021%2D44228