f4j without rewriting the existing
>>> >> log4j logging statements. The bridge ensures old dependencies that
>>> >> have not been migrated to SLF4J can work with Openmeetings.
>>> >>
>>> >> So OpenMeetings is not using or distributing the native lo
since
>> >> it's not using the native log4j jar file.
>> >>
>> >> So as far as I can see this vulnerability should not impact
>> >> OpenMeetings.
>> >>
>> >> However OpenMeetings regularly ships updates with the latest
>
gt; >> However OpenMeetings regularly ships updates with the latest
> >> libraries and dependencies, so if you are not using the latest
> >> version, you should update. There have been other CVE's fixed in
> >> recent versions.
> >>
> >> Thanks
over-slf4j-1.7.32.jar
Does anyone know, whether these are affected by the log4j
vulnerability CVE-2021-44228 and have to be updated?
Thanks,
Thomas
Links:
--
[1]
https://www.youracclaim.com/badges/da4e8828-743d-4968-af6f-49033f10d60a/public_url
[2]
https://www.youracclaim.com/bad
anyone know, whether these are affected by the log4j
vulnerability CVE-2021-44228 and have to be updated?
Thanks,
Thomas
t;
>
>
> On Mon, 13 Dec 2021 at 07:29, Thomas Scholzen
> wrote:
>
>> Openmeetings has, among others, the following dependencies:
>>
>> log4j-over-slf4j-1.7.32.jar
>> slf4j-api-1.7.32.jar
>> jcl-over-slf4j-1.7.32.jar
>>
>> Does anyone know, whether these are affected by the log4j vulnerability
>> CVE-2021-44228 and have to be updated?
>>
>> Thanks,
>> Thomas
>>
>
wrote:
Openmeetings has, among others, the following dependencies:
log4j-over-slf4j-1.7.32.jar
slf4j-api-1.7.32.jar
jcl-over-slf4j-1.7.32.jar
Does anyone know, whether these are affected by the log4j
vulnerability CVE-2021-44228 and have to be updated?
Thanks,
Thomas
-1.7.32.jar
>
> Does anyone know, whether these are affected by the log4j vulnerability
> CVE-2021-44228 and have to be updated?
>
> Thanks,
> Thomas
>
Openmeetings has, among others, the following dependencies:
log4j-over-slf4j-1.7.32.jar
slf4j-api-1.7.32.jar
jcl-over-slf4j-1.7.32.jar
Does anyone know, whether these are affected by the log4j vulnerability
CVE-2021-44228 and have to be updated?
Thanks,
Thomas
