Uploaded image for project: 'Log4cxx'
  1. Log4cxx
  2. LOGCXX-541

Upgrade log4j to 2.15.0 - CVE-2021-44288

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Not A Problem
    • None
    • None
    • Tests

    Description

      Log4j has an RCE vulnerability, see https://www.lunasec.io/docs/blog/log4j-zero-day/

      Attachments

        Issue Links

          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. LOGCXX-545 Upgrade log4j to 2.17.0 - Both log4j 1 and 2 have CVE vulnerability

          • Major - Major loss of function.
          • Resolved
          is superceded by

          Improvement - An improvement or enhancement to an existing feature or task. LOGCXX-542 Remove log4j serialization

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              Hurley Peter Hurley
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: