You are viewing a plain text version of this content. The canonical link for it is here.

Posted to log4cxx-dev@logging.apache.org by Raviraj Bhatane <rb...@vmware.com> on 2015/04/08 23:20:39 UTC

Version of Expat

The current version of log4cxx.dll is built with a version of "Expat" that has 4 known CVE's against it.

The 4 CVE's are:
  CVE-2013-0340 6.8
  CVE-2012-1148 5.0
  CVE-2012-0876 4.3
  CVE-2012-1147 4.3

Log4cxx.dll is currently using expat's version 1.95.7. The latest available version of Expat is 2.1.0 - see http://www.libexpat.org.

Thank you,
Raviraj

Re: Version of Expat

Posted by Thorsten Schöning <ts...@am-soft.de>.

Guten Tag Raviraj Bhatane,
am Mittwoch, 8. April 2015 um 23:20 schrieben Sie:

> Log4cxx.dll is currently using expat’s version 1.95.7. The latest
> available version of Expat is 2.1.0 - see http://www.libexpat.org.

I don't seem to understand what you actually want us to do, could you
please provide some more details? We don't seem to publish pre built
binaries, so if your version of log4cxx.dll uses an old version of
libexpat, you need to build it on your own with a more recent one. I
don't even find a concrete version of libexpat mentioned in the build
instructions or such.

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow