log4j script vs newer CVEs

By: Maxime Tardif user 20 Dec 2021 at 10:52 a.m. CST

1 Response
Maxime Tardif gravatar
Hi, Last week we deployed the script (update_log4j.sh, provided by Gluu) to patch the log4j vulnerability on our on-prem Gluu instance, but this was before the latest CVEs that exposed vulnerabilities in 2.15 and 2.16. Is there a newer version of this script that would patch all CVEs including CVE-2021-45105? Thank you
Gluu 4.1.1 CentOS 7.0
closed

Answers

By Mohib Zico staff 24 Jan 2022 at 11:37 a.m. CST

Copy
Mohib Zico gravatar
Hello Maxime, Same script will patch latest one as well.

Post an answer