Support Questions

naveennn · ‎01-13-2022

Dears,

Currently we are using Apache kafka 2.13-2.6.0 Version in our production and Currently (log4j-1.2.17) is installed on the server.

After a recent security scan, our vendor suggested upgrading to Log4j version 2.16.0 or higher since 1.x is an Unsupported Version(end of life) and a CVE-2021-4104 vulnerability.

Could you please suggest and provide the guidance to upgrade the log4j version at the earliest.

VidyaSargur · ‎01-13-2022

Hi @naveennn, Please read the relevant Support Announcement here: Cloudera response to CVE-2021-4104 which also has information on what steps to take.

Regards,

Vidya Sargur,
Community Manager

Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community:
Community Guidelines
How to use the forum

Cloudera Community

Support Questions

Log4j2 vulnerability

Re: log4j2 vulnerability

Vulnerability (Text4Shell) (CVE-2022-42889)

ERROR StatusLogger No log4j2 configuration file fo...

Log4j Vulnerability

log4j2 failure (CVE-2021-44228) in cloudera

CDP minor upgrade to close vulnerability

Qualys Vulnerability Scanner requries exceptions f...

Vulnerability assessment test

Vulnerability alert on my HDP 3.1.0.0-78 version. ...

CVE-2022-22970 and CVE-2022-22971 spring-core vuln...