[CLSA-2022:1643918500] Fixed CVE-2022-23305 in log4j
Type:
security
Severity:
Critical
Release date:
2022-02-03
Description:
- CVE-2022-23305: disable JDBCAppender by default. Add optional parameter for enabling it.
Updated packages:
  • log4j-1.2.14-6.4.el6.tuxcare.els2.x86_64.rpm
    sha:8d62e191501c7b68d33517dd7d4a3a53cb276a0d
  • log4j-manual-1.2.14-6.4.el6.tuxcare.els2.x86_64.rpm
    sha:9817c1419eea0e25a0f3c7f24ba35c7a978dde2d
  • log4j-javadoc-1.2.14-6.4.el6.tuxcare.els2.x86_64.rpm
    sha:c17a7a8ad6578ce6fc04b4c5c562aad8fa5c44b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.