You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@manifoldcf.apache.org by "Markus Schuch (Jira)" <ji...@apache.org> on 2021/12/10 21:20:00 UTC

[jira] [Resolved] (CONNECTORS-1683) Upgrade Log4J 2.15.0 (CVE-2021-44228)

     [ https://issues.apache.org/jira/browse/CONNECTORS-1683?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Markus Schuch resolved CONNECTORS-1683.
---------------------------------------
    Resolution: Fixed

> Upgrade Log4J 2.15.0 (CVE-2021-44228)
> -------------------------------------
>
>                 Key: CONNECTORS-1683
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1683
>             Project: ManifoldCF
>          Issue Type: Bug
>          Components: Framework core
>            Reporter: Markus Schuch
>            Assignee: Markus Schuch
>            Priority: Major
>              Labels: CVE-2021-44228, security, vulnerabilities
>
> Dependency Log4j 2 should be upgraded to Log4J 2.15.0, because there is a known RCE Vulnerability in previous Versions: https://www.lunasec.io/docs/blog/log4j-zero-day/



--
This message was sent by Atlassian Jira
(v8.20.1#820001)