ALAS-2022-225

Related Vulnerabilities: CVE-2021-44228   CVE-2021-44832   CVE-2021-45046   CVE-2021-45105  

ALAS-2022-225


Amazon Linux 2022 Security Advisory: ALAS-2022-225
Advisory Release Date: 2022-12-06 16:42 Pacific
Advisory Updated Date: 2022-12-06 16:42 Pacific
Severity: Critical

Issue Overview:


Affected Packages:

log4j


Issue Correction:
Run yum update log4j to update your system.

New Packages:
noarch:
    log4j-jcl-2.17.2-1.amzn2022.0.3.noarch
    log4j-slf4j-2.17.2-1.amzn2022.0.3.noarch
    log4j-2.17.2-1.amzn2022.0.3.noarch

src:
    log4j-2.17.2-1.amzn2022.0.3.src