[jira] [Created] (LOG4J2-3409) workaround for jackson-mapper-asl-1.9.13.jar security vulnerability @ flume-ng

["alexander kravchik (Jira)" <ji...@apache.org>]

alexander kravchik created LOG4J2-3409:
------------------------------------------

             Summary: workaround for jackson-mapper-asl-1.9.13.jar security vulnerability @ flume-ng
                 Key: LOG4J2-3409
                 URL: https://issues.apache.org/jira/browse/LOG4J2-3409
             Project: Log4j 2
          Issue Type: Bug
          Components: Flume Appender
    Affects Versions: 2.17.1
         Environment: java 11
            Reporter: alexander kravchik


Dear colleagues, 

we are using log4j2 with flume-ng appender. 

The below vulnerabilities are found in the dependent jackson-mapper-asl-1.9.13.jar :

cve-2019-10202

cve-2019-10172

etc...

Please advise if this will be fixed and planned ETA in case it is already fixed

Thanks , 

Sasha



--
This message was sent by Atlassian Jira
(v8.20.1#820001)