• Type: Bug
• Resolution: Fixed
• Priority: Major
• Component/s: talend-plugin
• Labels:

  • CVE-2021-45046
  • jcabot:001
  • jcabot:002
  • security

[JENKINS-67369] log4j dependency has another vulnerability CVE-2021-45046 in Talend Plugin

Wadeck Follonier created issue - 2021-12-15 08:22

Wadeck Follonier made changes - 2021-12-15 08:23

Description

Original: See JENKINS-67353

New: See JENKINS-67353, second vulnerability: CVE-2021-45046, requires to update Log4j to 2.16 now.

Wadeck Follonier made changes - 2021-12-15 08:23

Priority

Original: Critical [ 2 ]

New: Major [ 3 ]

Wadeck Follonier made changes - 2021-12-15 08:23

Labels

Original: CVE-2021-44228 security

New: CVE-2021-45046 security

Wadeck Follonier made changes - 2021-12-15 08:23

Description

Original: See JENKINS-67353, second vulnerability: CVE-2021-45046, requires to update Log4j to 2.16 now.

New: See JENKINS-67353, second vulnerability: CVE-2021-45046, requires to update Log4j to 2.16 now. This one is less important but will still be detected by scanners and alert all users.

Daniel Beck made changes - 2021-12-15 09:09

Released As

Original: Manual release 1.3

P Peters made changes - 2021-12-20 16:34

Released As		New: 1.14
Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

Jenkins CERT Bot made changes - 2022-01-30 14:31

Labels

Original: CVE-2021-45046 security

New: CVE-2021-45046 jcabot:001 jcabot:002 security