Tagged articles
2 articles
Page 1 of 1
Programmer DD
Programmer DD
Dec 20, 2021 · Information Security

How to Safely Upgrade to Log4j2 2.17.0 and Mitigate CVE‑2021‑45105

Log4j2 2.17.0 fixes the critical CVE‑2021‑45105 vulnerability affecting versions up to 2.16.0, and the article explains the flaw, provides Maven upgrade instructions, and offers temporary mitigation steps for environments that cannot upgrade immediately.

CVE-2021-45105Java SecurityPatternLayout
0 likes · 4 min read
How to Safely Upgrade to Log4j2 2.17.0 and Mitigate CVE‑2021‑45105
Laravel Tech Community
Laravel Tech Community
Dec 19, 2021 · Information Security

Apache Log4j 2.17.0 Release Fixes CVE‑2021‑45105 and Other Vulnerabilities

Apache Log4j 2.17.0 has been released, addressing CVE‑2021‑45105 and fixing recursive string‑replacement vulnerabilities that could cause StackOverflowError DoS attacks, while also tightening JNDI usage and correcting several configuration and appender issues, with recommended mitigation steps for earlier versions.

CVE-2021-45105DoSjava
0 likes · 4 min read
Apache Log4j 2.17.0 Release Fixes CVE‑2021‑45105 and Other Vulnerabilities