ELSA-2022-9419

ELSA-2022-9419 - log4j security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-05-23

Description

[0:1.2.14-6.4.2]
- Fix CVE-2022-23302, CVE-2022-23305, CVE-2022-23307, CVE-2017-5645
- [Orabug: 33868008]

[0:1.2.14-6.4.1]
- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104 [Orabug: 33689748]

Related CVEs

CVE-2022-23307

CVE-2017-5645

CVE-2022-23305

CVE-2022-23302

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	log4j-1.2.14-6.4.2.el6_10.src.rpm	5524d13cf94c666e61c7fa8b0d83bb13c54abc3d6ac57af780af0fdf8e1da2af	-	ol6_i386_ELS
	log4j-1.2.14-6.4.2.el6_10.i686.rpm	46cb08ce715b0bd1478e8d0dab114fc901cc1dfe3e11d10c7547f1ac24d1bbe4	-	ol6_i386_ELS
	log4j-javadoc-1.2.14-6.4.2.el6_10.i686.rpm	6ef8801585060e0ba20be4535e6e7c31ecdd1198bc49900d55408d37478d9c6f	-	ol6_i386_ELS
	log4j-manual-1.2.14-6.4.2.el6_10.i686.rpm	a8ce4432b83ed9872fa6b15a145bb002d64c49f970465fed5ad86f5aab6d7386	-	ol6_i386_ELS
Oracle Linux 6 (x86_64)	log4j-1.2.14-6.4.2.el6_10.src.rpm	5524d13cf94c666e61c7fa8b0d83bb13c54abc3d6ac57af780af0fdf8e1da2af	-	ol6_x86_64_ELS
	log4j-1.2.14-6.4.2.el6_10.x86_64.rpm	48fc9a0e8e3d6ee908db0fb472a43cfac1e8a3b60df74895574a6635449be58e	-	ol6_x86_64_ELS
	log4j-javadoc-1.2.14-6.4.2.el6_10.x86_64.rpm	868fe4d5c621379ad029e0c1240e8d5190e642f96b61c728a9e2e65630af3788	-	ol6_x86_64_ELS
	log4j-manual-1.2.14-6.4.2.el6_10.x86_64.rpm	cd6095ebaeec0ae900917e9879010789c76c7aee2da418748e74b7cce799974f	-	ol6_x86_64_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team