ALT-PU-2016-3257: package log4j update to version 2.3-alt0.1jpp
Описание
This update upgrades log4j to version 2.3-alt0.1jpp.
Устраненные уязвимости12
Ссылки6
GHSA-2qrg-x229-3v8q
https://github.com/advisories/GHSA-2qrg-x229-3v8qGHSA-65fg-84f6-3jq3
https://github.com/advisories/GHSA-65fg-84f6-3jq3GHSA-f7vh-qwp3-x37m
https://github.com/advisories/GHSA-f7vh-qwp3-x37mGHSA-vp98-w2p3-mv35
https://github.com/advisories/GHSA-vp98-w2p3-mv35GHSA-w9p3-5cr8-m3jj
https://github.com/advisories/GHSA-w9p3-5cr8-m3jjСвязанные уязвимости
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Included in Log4j 1.2 is a SocketServer class that is vulnerable to de ...
