Forum Discussion

jpadilla's avatar
jpadilla
Guide
4 years ago

Is community impacted by Log4J vulnerability?

Is Khoros community compaged by this log4j vulnerability: CVE-2021-44228
-dirk-'s avatar
-dirk-
Maven
4 years ago

As mentioned on various websites, early adopter who deploys Version 2.15 aren´t fully safe, so the question is, did Khoros uses version 2.16 meanwhile?

 

Thank you 🤞

  • -dirk-'s avatar
    -dirk-
    Maven
    4 years ago

    Khoros support is verry fast and answered me via case ticket:

    Yes, Khoros uses log4j version 2.16.

    khoros: Good job 👍

    • SyedSa's avatar
      SyedSa
      Moderator
      4 years ago

      Good to see you happy 🙂

      • -dirk-'s avatar
        -dirk-
        Maven
        4 years ago

        As for the news from this weekend, version 2.16 is also vulnerable, so the question arises whether the Khoros community is currently using version 2.17 already or when it will be used?

        If anyone have infos concerning this, please share with us.

        *fingers crossed*