You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@mina.apache.org by "DONG LI (Jira)" <ji...@apache.org> on 2022/01/24 02:24:00 UTC

[jira] [Created] (DIRMINA-1158) CVE-2022-23302/23305/23307 In log4j(1.x)

DONG LI created DIRMINA-1158:
--------------------------------

             Summary: CVE-2022-23302/23305/23307  In log4j(1.x) 
                 Key: DIRMINA-1158
                 URL: https://issues.apache.org/jira/browse/DIRMINA-1158
             Project: MINA
          Issue Type: Improvement
          Components: Core
    Affects Versions: 2.1.4, 2.1.5
            Reporter: DONG LI


Hi

Recently，three vulnerabilities have been discovered ：CVE-2022-23302/23305/23307  In log4j(1.x) 。

The module “mina-core” depend on log4j 1.2.17 ，

So do we have any plans to  deal with these vulnerabilities?

Thanks ：）

[https://www.cvedetails.com/cve/CVE-2022-23302]

[https://nvd.nist.gov/vuln/detail/CVE-2022-23305]

[https://nvd.nist.gov/vuln/detail/CVE-2022-23307]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org