https://bugzilla.redhat.com/show_bug.cgi?id=2030932
Selim Jahangir <mjahangi(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |mjahangi(a)redhat.com
--- Comment #55 from Selim Jahangir <mjahangi(a)redhat.com> ---
Hi
I have got a customer, who wanted to know, is there any impact of this
vulnerability (CVE-2021-44228) on following products:
Quay 3.4.6 and Clair3.4.6 ?
Regards
Selim
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
Mike Murphy <micmurph(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |micmurph(a)redhat.com
--- Comment #42 from Mike Murphy <micmurph(a)redhat.com> ---
We have a couple customers over here with Confirmed Stateside support asking
for a fix to this. 1 customer concerned with Satellite and the other concerned
about this with EAP 7.3.8
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
--- Comment #41 from Anand Paladugu <apaladug(a)redhat.com> ---
Hello
several customers are asking for versions of components that are impacted (with
in openshift 4 and 3) and also how work around documented in the CVE page (java
system variable) can be implemented.
Please advise.
Thx
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
https://bugzilla.redhat.com/show_bug.cgi?id=2030932
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was found in the Java logging library Apache Log4j in versions from 2.0.0 and before as well as version 2.14.1. This allows a remote attacker to execute code on the server if the system logs an attacker-controlled string value with the attacker's JNDI LDAP server lookup.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030932