Nuxeo Marketplace

Find Nuxeo packages for your application

Fix CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832
Install 2.2.1

How to install fix-cve-2021-44228 2.2.1

Please ensure you've already downloaded and installed the Nuxeo Platform.

For a Nuxeo Online Services registered instance with internet access:

$NUXEO_HOME/bin/nuxeoctl mp-install fix-cve-2021-44228-2.2.1

For an unregistered instance, or an offline instance:

First Download fix-cve-2021-44228-2.2.1.zip, then

$NUXEO_HOME/bin/nuxeoctl mp-install /path/to/fix-cve-2021-44228-2.2.1.zip
NO SUBSCRIPTION REQUIRED NUXEO SUPPORTED
About this Package
Production State
Production Ready
Latest Update
Jan 3, 2022, 2:31:27 PM
Vendor
Nuxeo
Type
Addon
Package Dependencies
None
Optional Dependencies
None
License
LGPL
Other Versions
2.2.1 2.2.0 2.1.0 2.0.0 1.0.0
Security
Marketplace Fix CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832

Fix CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832

By Nuxeo

This patch provides an upgrade of log4j libraries to 2.17.0 to fix following CVEs: CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832.

Apache link on CVE-2021-44228 CVE-2021-44228 CVE-2021-45046 CVE-2021-45105 CVE-2021-44832
Compatible Target Platforms
LTS 2023 LTS 2021 LTS 2019 LTS 2017
2.2.1 Yes
2.2.0 Yes
2.1.0 Yes
2.0.0 Yes
1.0.0 Yes
All Versions
Deprecated Target platforms Name Target platforms Range Target platforms Pattern Updated
2.2.1 - - - server-10.10, server-10.10-*, lts-2021.* Jan 3, 2022, 2:31:27 PM
2.2.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 20, 2021, 1:55:26 PM
2.1.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 15, 2021, 8:48:50 AM
2.0.0 - - - server-10.10, server-10.10-*, lts-2021.* Dec 13, 2021, 9:43:11 PM
1.0.0 - - - server-9.10, server-9.10-* Dec 13, 2021, 9:43:26 PM