I think you can find the response there :
and there :
Thank you Herve Le Fur, but I've already reviewed both of those articles and neither has information about mitigating these two specific files. I'm at a loss as to what to do with these files.
As the article says the Log4j JAR files remain unchanged.
To know more details about release date and status , please subscribe the below pages: https://status.informatica.com/