Mustang 2.3.3 was released on Tuesday, December 21st 2021 and updated it’s logback library from version 1.2.3 to 1.2.9.
Version 2021-12-13 and 2021-12-20 of https://github.com/mergebase/log4j-detector did not issue any warning so far but Github’s Dependabot recommended a version > 1.2.7 in conjunction with Log4j.
Mustang 2.3.2 was released on Thursday, December 16th 2021. Apart from the fact that the invoice class can now be persisted e.g. using Jackson, whitespace removal has been reconfigured to leave newlines in place, which may be required for XRechnung’s cash discount and other small fixed detailled in the projects history.md.
Please note that Mustang was not affected by log4j CVE-2021-44228 or CVE-2021-45046.
Frankfurt am Main, 2021-12-06
In their coalition agreement the new german government apparently agreed on a
federal reporting system on VAT which will be used for the creation, validation and forwarding of invoices
“ein elektronisches Meldesystem bundesweit einheitlich einführen, das für die Erstellung, Prüfung und Weiterleitung von Rechnungen verwendet wird”.
After Italy introducing mandatory business-to-business e-invoices in 2019 and France set to do so in 2026 (source when this was still planned for 2025) this agreement, together with other documents like a (realtively independent) (german) study, a (german) complaint by the Federal Audit Office, a (german) investigation by the research service of the Bundestag as well as a (german) request by the political liberal party, make it look as if these were preparations to introduce an obligation for e-invoices in Germany as well.