| Package | Affected versions | Patched versions |
|---|---|---|
| log4jhotpatch | < 1.1-16 | 1.1-16 |
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free