log4j script vs newer CVEs

By: Maxime Tardif user 20 Dec 2021 at 10:52 a.m. CST

1 Response
Maxime Tardif gravatar

Hi,

Last week we deployed the script (update_log4j.sh, provided by Gluu) to patch the log4j vulnerability on our on-prem Gluu instance, but this was before the latest CVEs that exposed vulnerabilities in 2.15 and 2.16. Is there a newer version of this script that would patch all CVEs including CVE-2021-45105?

Thank you

Gluu 4.1.1 CentOS 7.0
closed

Answers

By Mohib Zico Account Admin 24 Jan 2022 at 11:37 a.m. CST

Copy
Mohib Zico gravatar

Hello Maxime,

Same script will patch latest one as well.

Post an answer