Apache Log4j: Multiple Vulnerabilities

Apache Log4j: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache Log4j, the worst of which can lead to remote code execution. log4j 2024-02-18 2024-02-18 719146 remote 1.2.17

Log4j is a Java logging framework that supports various use cases with a rich set of components, a separate API, and a performance-optimized implementation.

Multiple vulnerabilities hav been discovered in Apache Log4j. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

Gentoo has discontinued support for log4j. We recommend that users unmerge it:


          # emerge --ask --depclean "dev-java/log4j"

CVE-2019-17571 CVE-2020-9488 CVE-2020-9493 CVE-2022-23302 CVE-2022-23305 graaff graaff