You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zookeeper.apache.org by "Sai Kiran Vudutala (Jira)" <ji...@apache.org> on 2021/12/10 19:00:00 UTC

[jira] [Created] (ZOOKEEPER-4423) Upgrade Log4j to 2.15.0 - CVE-2021-44228

Sai Kiran Vudutala created ZOOKEEPER-4423:
---------------------------------------------

             Summary: Upgrade Log4j to 2.15.0 - CVE-2021-44228
                 Key: ZOOKEEPER-4423
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4423
             Project: ZooKeeper
          Issue Type: Task
    Affects Versions: 3.6.2, 3.6.1, 3.7.0, 3.6.3, 3.6.0, 3.6.4
            Reporter: Sai Kiran Vudutala


Log4j has an RCE vulnerability, see [https://www.lunasec.io/docs/blog/log4j-zero-day/]

References. 
[https://github.com/advisories/GHSA-jfh8-c2jp-5v3q]

[https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126]

 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)