https://bugzilla.redhat.com/show_bug.cgi?id=1785616
--- Comment #12 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> ---
Statement:
This is the same issue as CVE-2017-5645. MITRE has CVE-2017-5645 to a similar
flaw found in log4j-2.x. The flaw found in log4j-1.2 has been assigned
CVE-2019-17571. CVE-2019-17571 has been addressed in Red Hat Enterprise Linux
via RHSA-2017:2423.
Also the rh-java-common-log4j package shipped with Red Hat Software Collections
was addressed via RHSA-2017:1417
--
You are receiving this mail because:
You are on the CC list for the bug.