From c39d792e9a7adf50ebc05a895d1d75ee60936263 Mon Sep 17 00:00:00 2001
From: ghidra1
Date: Mon, 24 Jan 2022 12:54:15 -0500
Subject: [PATCH] Update WhatsNew to reflect use of log4j 2.17.1
---
.../Public_Release/src/global/docs/WhatsNew.html | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html b/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html
index 348a29a01f..19f5bd7caa 100644
--- a/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html
+++ b/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html
@@ -56,8 +56,8 @@
- Delete any log4j jar files in Ghidra/Framework/Generic/lib.
- - Replace those jar files with the newer log4j 2.17.0 version: log4j-api-2.17.0.jar and log4j-core-2.17.0.jar.
- - Update the log4j version to refer to 2.17.0 in <install_dir>/Ghidra/Features/GhidraServer/data/classpath.frag.
+ Replace those jar files with the newer log4j 2.17.1 version: log4j-api-2.17.1.jar and log4j-core-2.17.1.jar.
+ Update the log4j version to refer to 2.17.1 in <install_dir>/Ghidra/Features/GhidraServer/data/classpath.frag.
@@ -65,14 +65,14 @@
You can find these in the latest Ghidra 10.1.1 release, or from:
- - https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.17.0/log4j-api-2.17.0.jar
- - https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.17.0/log4j-core-2.17.0.jar
+ - https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar
+ - https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar
The details of the vulnerabilities can be found in the following:
- CVE-2021-44228, CVE-2021-45046, CVE-2021-45105.
+ CVE-2021-44228, CVE-2021-44832, CVE-2021-45046, CVE-2021-45105.