Activity

Show:
Sanne Grinovero
changed the StatusDecember 15, 2021 at 12:57 PM
Resolved
Closed
Sanne Grinovero
changed the StatusDecember 15, 2021 at 12:48 PM
Open
Resolved
Sanne Grinovero
updated the ResolutionDecember 15, 2021 at 12:48 PM
None
Fixed
Sanne Grinovero
updated the Fix versionsDecember 15, 2021 at 12:47 PM
None
6.0.0.next
Sanne Grinovero
updated the Fix versionsDecember 15, 2021 at 12:47 PM
None
5.3.25
Sanne Grinovero
updated the Fix versionsDecember 15, 2021 at 12:47 PM
None
5.4.33
Sanne Grinovero
updated the Fix versionsDecember 15, 2021 at 12:47 PM
None
5.5.9
Sanne Grinovero
updated the Fix versionsDecember 15, 2021 at 12:47 PM
None
5.6.3
Sanne Grinovero
updated the DescriptionDecember 14, 2021 at 9:46 PM
The infamous CVE was supposedly fixed already by the previous release, but this version goes a step further in prevention by fully removing JNDI support and messages lookup.
The infamous CVE was supposedly fixed already by the previous release, but this version goes a step further in prevention by fully removing JNDI support and messages lookup. [https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0|https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0|smart-link]
Thomas Maurer
created the IssueApril 16, 2024 at 9:10 AM

Something went wrong on our end

If this keeps happening, share this information with your admin, who should contact support.

Hash 1YU6V67 Trace a503792b13654eff93e9efe407ff9df3

Details

Assignee

Andrea Boriero

Reporter

Thomas Maurer

Sprint

None

Fix versions

Priority

Major