Github messages for voidlinux
 help / color / mirror / Atom feed
* [ISSUE] log4j fallout
@ 2021-12-14 19:46 leahneukirchen
  2021-12-14 19:53 ` leahneukirchen
                   ` (13 more replies)
  0 siblings, 14 replies; 15+ messages in thread
From: leahneukirchen @ 2021-12-14 19:46 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 688 bytes --]

New issue by leahneukirchen on void-packages repository

https://github.com/void-linux/void-packages/issues/34534

Description:
These packages contain old, vulnerable versions of log4j.

- [ ] apache-jmeter-5.3_1	/usr/libexec/apache-jmeter/lib/log4j-core-2.13.1.jar
- [ ] apache-storm-2.2.0_3	/usr/lib/apache-storm/external/storm-autocreds/log4j-core-2.11.2.jar
- [ ] arduino-1.8.13_1	/usr/lib/arduino/lib/log4j-core-2.12.0.jar
- [ ] elasticsearch-5.1.2_2	/usr/share/elasticsearch/lib/log4j-core-2.7.jar
- [ ] sbt-1.3.10_2	/usr/share/sbt/lib/local-preloaded/org/apache/logging/log4j/log4j-core/2.11.2/log4j-core-2.11.2.jar

cc @knusbaum @bougyman @Gottox @igorsantana @Trojan295 

^ permalink raw reply	[flat|nested] 15+ messages in thread

end of thread, other threads:[~2022-10-06  8:08 UTC | newest]

Thread overview: 15+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-12-14 19:46 [ISSUE] log4j fallout leahneukirchen
2021-12-14 19:53 ` leahneukirchen
2022-01-07  9:54 ` hiljusti
2022-01-07  9:54 ` hiljusti
2022-01-18 18:43 ` knusbaum
2022-01-18 20:12 ` knusbaum
2022-06-29  0:55 ` classabbyamp
2022-06-29  0:55 ` classabbyamp
2022-09-27  2:13 ` github-actions
2022-09-27 21:55 ` Piraty
2022-09-28  8:33 ` Anachron
2022-09-28  8:36 ` Anachron
2022-09-28  8:42 ` Anachron
2022-10-06  8:08 ` classabbyamp
2022-10-06  8:08 ` [ISSUE] [CLOSED] " classabbyamp

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).