CVE-2021-44228 (log4j) - Vendor Responses

Technology Security
1

This is a thread to track vendor responses and updates for CVE-2021-44228.

General discussion can take place over on CVE-2021-44228 (log4j) Vulnerability Discussion.

2

UniFi Controller Update Released

https://community.ui.com/releases/UniFi-Network-Application-6-5-54/d717f241-48bb-4979-8b10-99db36ddabe1

3

VMWare Response

https://kb.vmware.com/s/article/87068

4

Anybody know HostiFi’s plan/schedule for updates? Never know where to look for updates and info from them.

5

Already done at HostiFi

1 Like
6

I did a quick gander around for a PaperCut response, but didn’t find anything.

Anyone know if they are using log4j?

Nvm. I’m bad at Google on Saturdays.

https://www.papercut.com/support/known-issues/#ng

Edit #2… Here’s PaperCut’s KB with links to workaround and a hotpatch. Log4Shell (CVE-2021-44228) - How is PaperCut Affected? | PaperCut

7

JAMF has released an update. https://docs.jamf.com/10.34.1/jamf-pro/release-notes/Whats_New_in_This_Release.html

8

https://www.papercut.com/support/known-issues/?id=PO-684

Affected and have a mitigation posted.

9

VMware has posted instructions for applying the “formatMsgNoLookups” mitigation to most of their affected products: VMSA-2021-0028.1 (vmware.com)

10

The Big Book of Vendor Responses:

1 Like
11

Here is official link for PaperCut patch.

https://www.papercut.com/support/known-issues/?id=PO-684#mf