Eclipse Community Forums: Newcomers » Log4j vulnerability in Eclipse IDE tool

Help

Home » Newcomers » Newcomers » Log4j vulnerability in Eclipse IDE tool

Thu, 24 March 2022 13:37

Messages: 33201
Registered: July 2009

Senior Member

The bundle org.apache.log4j 1.2.19.v20220208-1728 is a new version that is free of CVEs:

https://git.eclipse.org/r/c/orbit/orbit-recipes/+/190574

It comes from here where you can see all the CVEs of older version that are fixed in this latest new version:

https://reload4j.qos.ch/

The 1.2.x version was never affected by CVE-2021-44228:

https://wiki.eclipse.org/Eclipse_and_log4j2_vulnerability_(CVE-2021-44228)

That "famous" CVE only affected 2.x versions...

Ed Merks
Professional Support: https://www.macromodeling.com/

		Log4j vulnerability in Eclipse IDE tool By: prameel kumar on Wed, 16 March 2022 13:20
		Re: Log4j vulnerability in Eclipse IDE tool By: Ed Merks on Wed, 16 March 2022 15:00
		Re: Log4j vulnerability in Eclipse IDE tool By: Manoj Kumar on Thu, 24 March 2022 13:20
		Re: Log4j vulnerability in Eclipse IDE tool By: Ed Merks on Thu, 24 March 2022 13:37

Previous Topic:	Oomph installer error: The catalog could not be loaded
Next Topic:	Windows on Eclipse: "Error occurred during initialization of boot layer

Goto Forum:

]

Current Time: Sat Aug 24 05:20:08 GMT 2024

.:: Contact :: Home ::.

Sign up to our Newsletter