You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Sai Kiran Vudutala (Jira)" <ji...@apache.org> on 2021/12/10 18:58:00 UTC

[jira] [Created] (KAFKA-13534) Upgrade Log4j to 2.15.0 - CVE-2021-44228

Sai Kiran Vudutala created KAFKA-13534:
------------------------------------------

             Summary: Upgrade Log4j to 2.15.0 - CVE-2021-44228
                 Key: KAFKA-13534
                 URL: https://issues.apache.org/jira/browse/KAFKA-13534
             Project: Kafka
          Issue Type: Improvement
    Affects Versions: 3.0.0, 2.8.0, 2.7.0
            Reporter: Sai Kiran Vudutala


Log4j has an RCE vulnerability, see [https://www.lunasec.io/docs/blog/log4j-zero-day/]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)