gpp_maybe Security update for log4j12

SUSE-SLE-Module-Development-Tools-15-SP3-2022-226

This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842)

• Release Date
  Jan 28 2022
• References
  Bugzilla: 1193184, 1194843, 1194844, 1194842
  CVEs: CVE-2022-23307, CVE-2022-23302, CVE-2022-23305
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.3 x86_64

• Packages
  log4j12
  Java logging tool

  1.2.17-4.9.1 lock src

  log4j12-javadoc
  Java logging tool (Documentation)

  1.2.17-4.9.1 lock rpm

  log4j12-manual
  Java logging tool (Manual)

  1.2.17-4.9.1 lock rpm

Development Tools Module 15.3 aarch64

• Packages
  log4j12
  Java logging tool

  1.2.17-4.9.1 lock src

  log4j12-javadoc
  Java logging tool (Documentation)

  1.2.17-4.9.1 lock rpm

  log4j12-manual
  Java logging tool (Manual)

  1.2.17-4.9.1 lock rpm

Development Tools Module 15.3 ppc64le

• Packages
  log4j12
  Java logging tool

  1.2.17-4.9.1 lock src

  log4j12-javadoc
  Java logging tool (Documentation)

  1.2.17-4.9.1 lock rpm

  log4j12-manual
  Java logging tool (Manual)

  1.2.17-4.9.1 lock rpm

Development Tools Module 15.3 s390x

• Packages
  log4j12
  Java logging tool

  1.2.17-4.9.1 lock src

  log4j12-javadoc
  Java logging tool (Documentation)

  1.2.17-4.9.1 lock rpm

  log4j12-manual
  Java logging tool (Manual)

  1.2.17-4.9.1 lock rpm