Nuxeo Marketplace

Find Nuxeo packages for your application

Fix CVE-2021-44228 and CVE-2021-45046
Install 2.1.0

How to install fix-cve-2021-44228 2.1.0

Please ensure you've already downloaded and installed the Nuxeo Platform.

For a Nuxeo Online Services registered instance with internet access:

$NUXEO_HOME/bin/nuxeoctl mp-install fix-cve-2021-44228-2.1.0

For an unregistered instance, or an offline instance:

First Download fix-cve-2021-44228-2.1.0.zip, then

$NUXEO_HOME/bin/nuxeoctl mp-install /path/to/fix-cve-2021-44228-2.1.0.zip
NO SUBSCRIPTION REQUIRED NO SUPPORT PROVIDED
About this Package
Production State
Production Ready
Latest Update
Dec 15, 2021, 8:48:50 AM
Vendor
Nuxeo
Type
Addon
Package Dependencies
None
Optional Dependencies
None
License
LGPL
Other Versions
2.2.1 2.2.0 2.1.0 2.0.0 1.0.0
Security
Marketplace Fix CVE-2021-44228 and CVE-2021-45046

Fix CVE-2021-44228 and CVE-2021-45046

By Nuxeo

This patch provides an upgrade of log4j libraries to 2.16.0 to fix both CVEs: CVE-2021-44228 and CVE-2021-45046

Apache link on CVE-2021-44228 CVE-2021-44228 CVE-2021-45046
Compatible Target Platforms
LTS 2023 LTS 2021 LTS 2019 LTS 2017
2.2.1 Yes
2.2.0 Yes
2.1.0 Yes
2.0.0 Yes
1.0.0 Yes
All Versions
Deprecated Target platforms Name Target platforms Range Target platforms Pattern Updated
2.2.1 - - - server-10.10, server-10.10-*, lts-2021.* Jan 3, 2022, 2:31:27 PM
2.2.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 20, 2021, 1:55:26 PM
2.1.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 15, 2021, 8:48:50 AM
2.0.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 13, 2021, 9:43:11 PM
1.0.0 - - - server-9.10, server-9.10-* Dec 13, 2021, 9:43:26 PM