question Re: Log4j Vulnerability patch from Log4j 2.8.2 to 2.16.0 or above in Support Questions

Log4j Vulnerability patch from Log4j 2.8.2 to 2.16.0 or above

sathishCloudera — Wed, 11 Jan 2023 04:36:49 GMT

Hi Team,

We are currently using Cloudera 6.1.1 and now we are planning to change Log4j version from 2.8.2

to 2.16.0 or above.

Can you share the link of 2.16.0 or above log4j version so can i download it and apply patch.

Thanks

Re: Log4j Vulnerability patch from Log4j 2.8.2 to 2.16.0 or above

arunek95 — Tue, 31 Jan 2023 14:15:11 GMT

Hi @sathishCloudera , We have ready log4j patches for CDH 6.1.1 where log4j version is 2.17.1. Please reach out to Cloudera support with a technical case to deliver the patch.