摘要:
log4j security update
安全等级: Critical
公告ID: KylinSec-SA-2021-1473
发布日期: 2021年12月25日
Log4j是一个帮助程序员将日志语句输出到各种输出目标的工具。
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2021-45105 | KY3.4-4A | log4j,mybatis,netty,springframework,wildfly-security-manager,wildfly-elytron,wildfly-build-tools,wil | Fixed |
| CVE-2021-45046 | KY3.4-4A | log4j,mybatis,netty,springframework,wildfly-security-manager,wildfly-elytron,wildfly-build-tools,wil | Fixed |
| CVE-2021-44228 | KY3.4-4A | log4j,mybatis,netty,springframework,wildfly-security-manager,wildfly-elytron,wildfly-build-tools,wil | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| log4j | noarch | 2.17.0-1.kb2.ky3 |
| log4j-bom | noarch | 2.17.0-1.kb2.ky3 |
| log4j-help | noarch | 2.17.0-1.kb2.ky3 |
| log4j-jcl | noarch | 2.17.0-1.kb2.ky3 |
| log4j-jmx-gui | noarch | 2.17.0-1.kb2.ky3 |
| log4j-slf4j | noarch | 2.17.0-1.kb2.ky3 |
| log4j-taglib | noarch | 2.17.0-1.kb2.ky3 |
| log4j-web | noarch | 2.17.0-1.kb2.ky3 |
| mybatis | noarch | 3.2.8-2.kb3.ky3 |
| mybatis-javadoc | noarch | 3.2.8-2.kb3.ky3 |
| springframework | noarch | 3.2.18-9.kb2.ky3 |
| springframework-aop | noarch | 3.2.18-9.kb2.ky3 |
| springframework-beans | noarch | 3.2.18-9.kb2.ky3 |
| springframework-context | noarch | 3.2.18-9.kb2.ky3 |
| springframework-expression | noarch | 3.2.18-9.kb2.ky3 |
| springframework-help | noarch | 3.2.18-9.kb2.ky3 |
| springframework-instrument | noarch | 3.2.18-9.kb2.ky3 |
| springframework-jdbc | noarch | 3.2.18-9.kb2.ky3 |
| springframework-jms | noarch | 3.2.18-9.kb2.ky3 |
| springframework-orm | noarch | 3.2.18-9.kb2.ky3 |
| springframework-orm-hibernate4 | noarch | 3.2.18-9.kb2.ky3 |
| springframework-oxm | noarch | 3.2.18-9.kb2.ky3 |
| springframework-tx | noarch | 3.2.18-9.kb2.ky3 |
| springframework-web | noarch | 3.2.18-9.kb2.ky3 |
| netty-help | noarch | 4.1.13-14.kb2.ky3 |
| wildfly-security-manager | noarch | 1.1.2-1.kb3.ky3 |
| wildfly-security-manager-javadoc | noarch | 1.1.2-1.kb3.ky3 |
| wildfly-elytron | noarch | 1.0.2-1.kb3.ky3 |
| wildfly-elytron-javadoc | noarch | 1.0.2-1.kb3.ky3 |
| wildfly-build-tools | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-build-tools-javadoc | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-feature-pack-build-maven-plugin | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-server-provisioning | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-server-provisioning-maven-plugin | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-server-provisioning-standalone | noarch | 1.1.6-1.kb3.ky3 |
| wildfly-common | noarch | 1.1.0-7.kb3.ky3 |
| wildfly-common-help | noarch | 1.1.0-7.kb3.ky3 |
| wildfly-core | noarch | 2.2.0-2.kb2.ky3 |
| wildfly-core-feature-pack | noarch | 2.2.0-2.kb2.ky3 |
| wildfly-core-javadoc | noarch | 2.2.0-2.kb2.ky3 |
| libthrift-java | noarch | 0.14.0-5.kb2.ky3 |
| perl-thrift | noarch | 0.14.0-5.kb2.ky3 |
| jenkins-json-lib | noarch | 2.4-19.kb2.ky3 |
| json-lib | noarch | 2.4-19.kb2.ky3 |
| json-lib-help | noarch | 2.4-19.kb2.ky3 |
| datanucleus-core | noarch | 3.2.15-3.kb2.ky3 |
| datanucleus-core-javadoc | noarch | 3.2.15-3.kb2.ky3 |
| jgroups | noarch | 3.6.10-8.kb2.ky3 |
| jgroups-help | noarch | 3.6.10-8.kb2.ky3 |
| mx4j | noarch | 3.0.1-2.kb2.ky3 |
| mx4j-javadoc | noarch | 3.0.1-2.kb2.ky3 |
| mx4j-manual | noarch | 3.0.1-2.kb2.ky3 |
| jboss-logging | noarch | 3.3.0-6.kb2.ky3 |
| jboss-logging-javadoc | noarch | 3.3.0-6.kb2.ky3 |
| infinispan | noarch | 8.2.4-9.kb2.ky3 |
| infinispan-help | noarch | 8.2.4-9.kb2.ky3 |
| datanucleus-rdbms | noarch | 3.2.13-2.kb2.ky3 |
| datanucleus-rdbms-javadoc | noarch | 3.2.13-2.kb2.ky3 |
| avalon-logkit | noarch | 2.1-33.kb2.ky3 |
| avalon-logkit-help | noarch | 2.1-33.kb2.ky3 |
| datanucleus-api-jdo | noarch | 3.2.8-2.kb2.ky3 |
| datanucleus-api-jdo-javadoc | noarch | 3.2.8-2.kb2.ky3 |
| HikariCP | noarch | 2.4.3-5.kb2.ky3 |
| HikariCP-help | noarch | 2.4.3-5.kb2.ky3 |
| metrics | noarch | 3.1.2-2.kb2.ky3 |
| metrics-annotation | noarch | 3.1.2-2.kb2.ky3 |
| metrics-benchmarks | noarch | 3.1.2-2.kb2.ky3 |
| metrics-doc | noarch | 3.1.2-2.kb2.ky3 |
| metrics-ehcache | noarch | 3.1.2-2.kb2.ky3 |
| metrics-ganglia | noarch | 3.1.2-2.kb2.ky3 |
| metrics-graphite | noarch | 3.1.2-2.kb2.ky3 |
| metrics-healthchecks | noarch | 3.1.2-2.kb2.ky3 |
| metrics-httpasyncclient | noarch | 3.1.2-2.kb2.ky3 |
| metrics-httpclient | noarch | 3.1.2-2.kb2.ky3 |
| metrics-javadoc | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jdbi | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jersey2 | noarch | 3.1.2-2.kb2.ky3 |
| metrics-json | noarch | 3.1.2-2.kb2.ky3 |
| metrics-jvm | noarch | 3.1.2-2.kb2.ky3 |
| metrics-log4j | noarch | 3.1.2-2.kb2.ky3 |
| metrics-log4j2 | noarch | 3.1.2-2.kb2.ky3 |
| metrics-logback | noarch | 3.1.2-2.kb2.ky3 |
| metrics-parent | noarch | 3.1.2-2.kb2.ky3 |
| metrics-servlet | noarch | 3.1.2-2.kb2.ky3 |
| metrics-servlets | noarch | 3.1.2-2.kb2.ky3 |
| netty | x86_64 | 4.1.13-14.kb2.ky3 |
| python3-thrift | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-devel | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-glib | x86_64 | 0.14.0-5.kb2.ky3 |
| thrift-qt | x86_64 | 0.14.0-5.kb2.ky3 |
| netty | aarch64 | 4.1.13-14.kb2.ky3 |
| python3-thrift | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-devel | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-glib | aarch64 | 0.14.0-5.kb2.ky3 |
| thrift-qt | aarch64 | 0.14.0-5.kb2.ky3 |
dnf update log4j-slf4j metrics-servlets mx4j-javadoc jboss-logging json-lib-help mybatis-javadoc libthrift-java HikariCP-help wildfly-server-provisioning-maven-plugin wildfly-build-tools springframework-help wildfly-security-manager-javadoc wildfly-server-provisioning-standalone springframework-jms thrift-devel metrics-logback infinispan wildfly-core log4j-taglib netty thrift-qt log4j-jmx-gui metrics-httpclient metrics-parent datanucleus-api-jdo-javadoc springframework-orm-hibernate4 mx4j datanucleus-rdbms-javadoc metrics-benchmarks metrics-ehcache json-lib wildfly-server-provisioning metrics-ganglia springframework-aop datanucleus-rdbms metrics-json mybatis metrics-httpasyncclient wildfly-feature-pack-build-maven-plugin metrics-log4j metrics-jdbi jgroups wildfly-common-help springframework log4j-web springframework-expression datanucleus-core jenkins-json-lib log4j-jcl wildfly-core-javadoc metrics-doc mx4j-manual springframework-instrument wildfly-elytron-javadoc jboss-logging-javadoc springframework-web springframework-context log4j wildfly-common metrics-annotation perl-thrift metrics-jersey2 thrift metrics-healthchecks metrics-javadoc springframework-tx metrics wildfly-core-feature-pack avalon-logkit HikariCP log4j-help wildfly-security-manager springframework-jdbc springframework-beans infinispan-help datanucleus-core-javadoc springframework-orm metrics-graphite wildfly-build-tools-javadoc metrics-log4j2 metrics-servlet springframework-oxm avalon-logkit-help wildfly-elytron datanucleus-api-jdo python3-thrift thrift-glib jgroups-help metrics-jvm netty-help log4j-bom
springframework-orm-hibernate4
wildfly-security-manager-javadoc
wildfly-feature-pack-build-maven-plugin
wildfly-server-provisioning-maven-plugin
wildfly-server-provisioning-standalone
springframework-orm-hibernate4
wildfly-security-manager-javadoc
wildfly-feature-pack-build-maven-plugin
wildfly-server-provisioning-maven-plugin
