Page 1 of 1

Log4J Shell attack

Posted: Mon Dec 13, 2021 6:13 am
by Humph_rey
Hi there,

is there a solution for scalix 12.8 ? we have log4j-2.11.1 in it.

regards

Re: Log4J Shell attack

Posted: Mon Dec 13, 2021 6:24 am
by Humph_rey
is ist possible to do something like this:

zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

17/12/21

By the way…, you can change log4j-api/jul/core to Version 2.17.0 . Ist works!