Scalix Forums
http://www.scalix.com/forums/
Log4J Shell attack
http://www.scalix.com/forums/viewtopic.php?f=45&t=97654
Page
1
of
1
Log4J Shell attack
Posted:
Mon Dec 13, 2021 6:13 am
by
Humph_rey
Hi there,
is there a solution for scalix 12.8 ? we have log4j-2.11.1 in it.
regards
Re: Log4J Shell attack
Posted:
Mon Dec 13, 2021 6:24 am
by
Humph_rey
is ist possible to do something like this:
zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
17/12/21
By the way…, you can change log4j-api/jul/core to Version 2.17.0 . Ist works!