SUSE-SU-2022:0226-1 Security update for log4j12

This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. bsc1194844 - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. bsc1194843 - CVE-2022-23302: Fix remote code...

OPENSUSE-SU-2022:0214-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. bsc1194844 - CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. bsc1194843 - CVE-2022-23302:...

SUSE-SU-2022:0212-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. bsc1194844 - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. bsc1194843 - CVE-2022-23302: Fix remote code...

SUSE-SU-2022:14881-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. bsc1194844 - CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. bsc1194843 - CVE-2022-23302:...

OPENSUSE-SU-2022:0002-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2021-44832: Fixes a remote code execution via JDBC Appender bsc1194127 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:4208-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2021-44832: Fixes a remote code execution via JDBC Appender bsc1194127...

OPENSUSE-SU-2021:1601-1 Security update for log4j

This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes LOG4J2-3198, LOG4J2-3201, LOG4J2-3208, and LOG4J2-3211 that are included in...

SUSE-SU-2021:4115-1 Security update for log4j

This update for log4j fixes the following issue: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. bsc1193662...

SUSE-SU-2021:4111-1 Security update for log4j

This update for log4j fixes the following issue: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. bsc1193662...

OPENSUSE-SU-2021:4107-1 Security update for log4j

This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes LOG4J2-3198, LOG4J2-3201, LOG4J2-3208, and LOG4J2-3211 that are included in...

OPENSUSE-SU-2021:4094-1 Security update for log4j

This update for log4j fixes the following issue: CVE-2021-44228: The previously published fix by upstream turned out to be incomplete. Therefore, upstream has recommended disabling JNDI support in log4j by default to be completely sure that this vulnerability cannot be exploited. This update...

MGASA-2021-0556 Updated log4j packages fix security vulnerability

Apache Log4j2 =2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when...

OPENSUSE-SU-2020:0051-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer bsc1159646. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:0053-1 Security update for log4j

This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer bsc1159646...