You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@jmeter.apache.org by siva krishna <si...@gmail.com> on 2021/12/16 00:24:51 UTC

New Version for Log4j vulnerability

Hi

Can you pls suggest what is the version to be used for Log4J vulnerability


Thanks

Re: New Version for Log4j vulnerability

Posted by Brian Wolfe <wo...@gmail.com>.

There will be a new release soon. According to the mailing list I saw some
conversation about a fix having been developed and is undergoing some
testing.

On Wed, Dec 15, 2021 at 8:14 PM siva krishna <si...@gmail.com> wrote:

> Hi mahesh
>
> Thanks for the reply
> I am looking if there is any new version of jmeter released? Not the log4j
> version
>
> Current jmeter 5.4.1 has 2.13 log4j version
>
>
> Thanks
>
>
> On Thu, 16 Dec 2021, 11:44 మహేష్™, <pm...@gmail.com> wrote:
>
> > Any version above log4j-core.2.15.jar is fine.
> >
> > Regards,
> >
> > On Wed, Dec 15, 2021, 18:25 siva krishna <si...@gmail.com> wrote:
> >
> > > Hi
> > >
> > > Can you pls suggest what is the version to be used for Log4J
> > vulnerability
> > >
> > >
> > > Thanks
> > >
> >
>


-- 
Thanks,
Brian Wolfe
https://www.linkedin.com/in/brian-wolfe-3136425a/

Re: New Version for Log4j vulnerability

Posted by మహేష్™ <pm...@gmail.com>.

Found this link for work around. Hope this helps

https://dev.to/sebiboga/jmeter-541-fix-for-security-cve-2021-44228-issue-4joc

Regards,
Mahesh

On Wed, Dec 15, 2021 at 7:14 PM siva krishna <si...@gmail.com> wrote:

> Hi mahesh
>
> Thanks for the reply
> I am looking if there is any new version of jmeter released? Not the log4j
> version
>
> Current jmeter 5.4.1 has 2.13 log4j version
>
>
> Thanks
>
>
> On Thu, 16 Dec 2021, 11:44 మహేష్™, <pm...@gmail.com> wrote:
>
> > Any version above log4j-core.2.15.jar is fine.
> >
> > Regards,
> >
> > On Wed, Dec 15, 2021, 18:25 siva krishna <si...@gmail.com> wrote:
> >
> > > Hi
> > >
> > > Can you pls suggest what is the version to be used for Log4J
> > vulnerability
> > >
> > >
> > > Thanks
> > >
> >
>

Re: New Version for Log4j vulnerability

Posted by siva krishna <si...@gmail.com>.

Hi mahesh

Thanks for the reply
I am looking if there is any new version of jmeter released? Not the log4j
version

Current jmeter 5.4.1 has 2.13 log4j version


Thanks


On Thu, 16 Dec 2021, 11:44 మహేష్™, <pm...@gmail.com> wrote:

> Any version above log4j-core.2.15.jar is fine.
>
> Regards,
>
> On Wed, Dec 15, 2021, 18:25 siva krishna <si...@gmail.com> wrote:
>
> > Hi
> >
> > Can you pls suggest what is the version to be used for Log4J
> vulnerability
> >
> >
> > Thanks
> >
>

Re: New Version for Log4j vulnerability

Posted by మహేష్™ <pm...@gmail.com>.

Any version above log4j-core.2.15.jar is fine.

Regards,

On Wed, Dec 15, 2021, 18:25 siva krishna <si...@gmail.com> wrote:

> Hi
>
> Can you pls suggest what is the version to be used for Log4J vulnerability
>
>
> Thanks
>