You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Jose Moreno Delgado <jo...@msn.com> on 2021/12/16 20:51:47 UTC
Log4j vulnerability exposure
Hi, I would like to know if Guacamole 1.3.0 based on Docker Glyptonodon is affected by this recent attack based on Java for logging, log4j.
BR.
Re: Log4j vulnerability exposure
Posted by Mike Jumper <mj...@apache.org>.
On Thu, Dec 16, 2021, 13:02 Mike Jumper <mj...@apache.org> wrote:
> On Thu, Dec 16, 2021, 12:54 Tim Worcester <ti...@gmail.com>
> wrote:
>
>> Not affected: https://github.com/apache/guacamole-website/pull/97
>>
>
> The live version of the above:
>
> https://guacamole.apache.org/security/#not-affected-by-cve-2021-44228
>
Also, Jose, as you mentioned Glyptodon, there is similar clarification
there:
https://glyp.to/doc/latest/faq-for-cve-2021-44228-42598682.html
- Mike
Re: Log4j vulnerability exposure
Posted by Mike Jumper <mj...@apache.org>.
On Thu, Dec 16, 2021, 12:54 Tim Worcester <ti...@gmail.com>
wrote:
> Not affected: https://github.com/apache/guacamole-website/pull/97
>
The live version of the above:
https://guacamole.apache.org/security/#not-affected-by-cve-2021-44228
- Mike
Re: Log4j vulnerability exposure
Posted by Jose Moreno Delgado <jo...@msn.com>.
Thank you so much for your help.
El 16 dic. 2021 21:53, Tim Worcester <ti...@gmail.com> escribió:
> Not affected: <https://github.com/apache/guacamole-website/pull/97>
>
>
>
>
>
> On Thu, Dec 16, 2021 at 3:52 PM Jose Moreno Delgado
> <[jose_teleco@msn.com](mailto:jose_teleco@msn.com)> wrote:
>
>
>> Hi, I would like to know if Guacamole 1.3.0 based on Docker Glyptonodon is
affected by this recent attack based on Java for logging, log4j.
>>
>>
>
>>
>> BR.
Re: Log4j vulnerability exposure
Posted by Tim Worcester <ti...@gmail.com>.
Not affected: https://github.com/apache/guacamole-website/pull/97
On Thu, Dec 16, 2021 at 3:52 PM Jose Moreno Delgado <jo...@msn.com>
wrote:
> Hi, I would like to know if Guacamole 1.3.0 based on Docker Glyptonodon is
> affected by this recent attack based on Java for logging, log4j.
>
> BR.
>