Skip to main content
Solved

log4shell a Commvault application, support updates?

  • 15 December 2021
  • 3 replies
  • 160 views

Forum|alt.badge.img+6

one of our departments is saying our servers we use for Commvault are using log4shell v1.2x. They need to update it to v2.16.0.  Im green when it comes to this topic. is this log4shell a third party app which the server has installed prior to Commvault software, or is this something that Commvault installs, and is resolved by updating the Commvault software? Thats where the confusion comes into play for me, because it comes down to whether or not the department that brought this up is asking us for permissions to update it, or if this is something to do with commvault software which my team needs to handle?

Best answer by Mike Struening RETIRED

Hi @TP_Erickson , I assume they are talking about this:

 

This is an open source library used for logging/debugging.  If you have database agents that use archive (and a few more features, listed in the above article) then you might be vulnerable.

We currently have an update that removes 2.x and upgrades to 2.15, though we are working on updates to upgrade to 2.16.

The above post is where I’m updating everyone.  Head over there and subscribe so you can get the latest updates.

View original
Did this answer your question?

3 replies

Mike Struening
Vaulter
Forum|alt.badge.img+23

Hi @TP_Erickson , I assume they are talking about this:

 

This is an open source library used for logging/debugging.  If you have database agents that use archive (and a few more features, listed in the above article) then you might be vulnerable.

We currently have an update that removes 2.x and upgrades to 2.15, though we are working on updates to upgrade to 2.16.

The above post is where I’m updating everyone.  Head over there and subscribe so you can get the latest updates.


Forum|alt.badge.img+1
  • Bit
  • 4 replies
  • December 17, 2021

Hello Mike,

when is the new patch finished? Is there any appointment for this?

 


Mike Struening
Vaulter
Forum|alt.badge.img+23

It was released yesterday.  For the most up to date info, subscribe to the thread posted above (the sticky one).

We are constantly monitoring and updating things there.

We do have a Maintenance Release coming early next week that will contain the fixes that are in the latest hotfix pack.


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings