openSUSE-SU-2021:4111-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2021:4111-1

Related

Published

2021-12-17T11:18:53Z

Modified

2021-12-17T11:18:53Z

Summary

Security update for log4j

Details

This update for log4j fixes the following issue:

CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.17-5.6.1

{
    "binaries": [
        {
            "log4j-manual": "1.2.17-5.6.1"
        }
    ]
}