logshell exploit

9 views

Skip to first unread message

Jeff McWhirter

unread,

Dec 14, 2021, 7:49:08 AM12/14/21

to ram...@googlegroups.com

Hi RAMADDA users,

Just an update regarding the latest LogShell RCE issue.

It appears that RAMADDA was not susceptible to this exploit. While it uses the log4j library it used an older version of the library that did not contain the exploit.

I have taken this as an opportunity to update the libraries that RAMADDA uses to the new log4j that does not contain the update. This required some code changes and I will wait a bit to make a formal release. I'll send a note when this release is ready