摘要:
log4j security update
安全等级: Critical
公告ID: KylinSec-SA-2021-1466
发布日期: 2021年12月17日
关联CVE: CVE-2021-45046
Log4j是一个帮助程序员将日志语句输出到各种输出目标的工具。
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2021-45046 | KY3.4-4A | log4j,jboss-logging,jgroups,json-lib,metrics,mx4j,netty,springframework,thrift,HikariCP,avalon-frame | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| log4j | noarch | 2.17.0-1.kb2.ky3 |
| log4j-bom | noarch | 2.17.0-1.kb2.ky3 |
| log4j-help | noarch | 2.17.0-1.kb2.ky3 |
| log4j-jcl | noarch | 2.17.0-1.kb2.ky3 |
| log4j-jmx-gui | noarch | 2.17.0-1.kb2.ky3 |
| log4j-slf4j | noarch | 2.17.0-1.kb2.ky3 |
| log4j-taglib | noarch | 2.17.0-1.kb2.ky3 |
| log4j-web | noarch | 2.17.0-1.kb2.ky3 |
| jboss-logging | noarch | 3.3.0-6.kb2.ky3 |
| jboss-logging-javadoc | noarch | 3.3.0-6.kb2.ky3 |
| jgroups | noarch | 3.6.10-8.kb2.ky3 |
| jgroups-help | noarch | 3.6.10-8.kb2.ky3 |
| jenkins-json-lib | noarch | 2.4-19.kb2.ky3 |
| json-lib | noarch | 2.4-19.kb2.ky3 |
| json-lib-help | noarch | 2.4-19.kb2.ky3 |
| metrics | noarch | 3.1.2-2.kb2.ky3 |
| metrics-annotation | noarch | 3.1.2-2.kb2.ky3 |
| metrics-benchmarks | noarch | 3.1.2-2.kb2.ky3 |
| metrics-doc | noarch | 3.1.2-2.kb2.ky3 |
| metrics-ehcache | noarch | 3.1.2-2.kb2.ky3 |
| metrics-ganglia | noarch | 3.1.2-2.kb2.ky3 |
| metrics-graphite | noarch | 3.1.2-2.kb2.ky3 |
| metrics-healthchecks | noarch | 3.1.2-2.kb2.ky3 |
| metrics-httpasyncclient | noarch | 3.1.2-2.kb2.ky3 |
| metrics-httpclient | noarch | 3.1.2-2.kb2.ky3 |
| metrics-javadoc | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jdbi | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jersey2 | noarch | 3.1.2-2.kb2.ky3 |
| metrics-json | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jvm | noarch | 3.1.2-2.kb2.ky3 |
| metrics-log4j | noarch | 3.1.2-2.kb2.ky3 |
| metrics-log4j2 | noarch | 3.1.2-2.kb2.ky3 |
| metrics-logback | noarch | 3.1.2-2.kb2.ky3 |
| metrics-parent | noarch | 3.1.2-2.kb2.ky3 |
| metrics-servlet | noarch | 3.1.2-2.kb2.ky3 |
| metrics-servlets | noarch | 3.1.2-2.kb2.ky3 |
| mx4j | noarch | 3.0.1-2.kb2.ky3 |
| mx4j-javadoc | noarch | 3.0.1-2.kb2.ky3 |
| mx4j-manual | noarch | 3.0.1-2.kb2.ky3 |
| netty-help | noarch | 4.1.13-14.kb2.ky3 |
| springframework | noarch | 3.2.18-9.kb2.ky3 |
| springframework-aop | noarch | 3.2.18-9.kb2.ky3 |
| springframework-beans | noarch | 3.2.18-9.kb2.ky3 |
| springframework-context | noarch | 3.2.18-9.kb2.ky3 |
| springframework-expression | noarch | 3.2.18-9.kb2.ky3 |
| springframework-help | noarch | 3.2.18-9.kb2.ky3 |
| springframework-instrument | noarch | 3.2.18-9.kb2.ky3 |
| springframework-jdbc | noarch | 3.2.18-9.kb2.ky3 |
| springframework-jms | noarch | 3.2.18-9.kb2.ky3 |
| springframework-orm | noarch | 3.2.18-9.kb2.ky3 |
| springframework-orm-hibernate4 | noarch | 3.2.18-9.kb2.ky3 |
| springframework-oxm | noarch | 3.2.18-9.kb2.ky3 |
| springframework-tx | noarch | 3.2.18-9.kb2.ky3 |
| springframework-web | noarch | 3.2.18-9.kb2.ky3 |
| libthrift-java | noarch | 0.14.0-5.kb2.ky3 |
| perl-thrift | noarch | 0.14.0-5.kb2.ky3 |
| HikariCP | noarch | 2.4.3-5.kb2.ky3 |
| HikariCP-help | noarch | 2.4.3-5.kb2.ky3 |
| avalon-framework | noarch | 4.3-23.kb2.ky3 |
| avalon-framework-help | noarch | 4.3-23.kb2.ky3 |
| avalon-logkit | noarch | 2.1-33.kb2.ky3 |
| avalon-logkit-help | noarch | 2.1-33.kb2.ky3 |
| datanucleus-api-jdo | noarch | 3.2.8-2.kb2.ky3 |
| datanucleus-api-jdo-javadoc | noarch | 3.2.8-2.kb2.ky3 |
| datanucleus-core | noarch | 3.2.15-3.kb2.ky3 |
| datanucleus-core-javadoc | noarch | 3.2.15-3.kb2.ky3 |
| datanucleus-rdbms | noarch | 3.2.13-2.kb2.ky3 |
| datanucleus-rdbms-javadoc | noarch | 3.2.13-2.kb2.ky3 |
| infinispan | noarch | 8.2.4-9.kb2.ky3 |
| infinispan-help | noarch | 8.2.4-9.kb2.ky3 |
| wildfly-core | noarch | 2.2.0-2.kb2.ky3 |
| wildfly-core-feature-pack | noarch | 2.2.0-2.kb2.ky3 |
| wildfly-core-javadoc | noarch | 2.2.0-2.kb2.ky3 |
| apache-zookeeper | noarch | 3.6.1-2.2.kb3.ky3 |
| netty | x86_64 | 4.1.13-14.kb2.ky3 |
| python3-thrift | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-devel | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-glib | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-qt | x86_64 | 0.14.0-5.kb2.ky3 |
| netty | aarch64 | 4.1.13-14.kb2.ky3 |
| python3-thrift | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-devel | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-glib | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-qt | aarch64 | 0.14.0-5.kb2.ky3 |
dnf update springframework-expression datanucleus-core metrics-logback jenkins-json-lib log4j-jcl log4j-slf4j infinispan wildfly-core wildfly-core-javadoc metrics-doc mx4j-manual metrics-servlets mx4j-javadoc infinispan-help datanucleus-core-javadoc log4j-taglib netty thrift-qt log4j-jmx-gui json-lib-help jboss-logging jboss-logging-javadoc metrics-httpclient metrics-parent springframework-instrument springframework-orm mx4j springframework-orm-hibernate4 springframework-web metrics-graphite metrics-benchmarks datanucleus-rdbms-javadoc metrics-ehcache json-lib metrics-ganglia springframework-context log4j metrics-log4j2 metrics-servlet springframework metrics-annotation libthrift-java springframework-aop HikariCP-help datanucleus-rdbms metrics-json springframework-oxm avalon-logkit-help metrics-jersey2 metrics-httpasyncclient perl-thrift avalon-framework-help thrift datanucleus-api-jdo springframework-beans datanucleus-api-jdo-javadoc metrics-log4j metrics-healthchecks metrics-javadoc python3-thrift metrics-jdbi metrics springframework-tx thrift-glib jgroups-help springframework-help wildfly-core-feature-pack HikariCP avalon-framework avalon-logkit jgroups metrics-jvm log4j-help netty-help springframework-jms thrift-devel springframework-jdbc log4j-web apache-zookeeper log4j-bom
springframework-orm-hibernate4
