Java log4j vulnerability

[glenn]

Hi there,

Im sure youre away of this new vulnerability.

I am just wondering if you are pushing Imunify/Cloudlinux updates out to mitigate this until updates are available?

I havent seen any updates yet on our Plesk CPs.

Thanks
G

[trey]

I just opened a support ticket asking the same question.

<<EDIT>>

Got a very prompt response that they have an internal ticket (DEFA-4542) open and they are working on it today.

[eellis]

Howdy Glenn and Trey,

The folks upstream dont see this impacting RHEL at all. Per the release - https://access.redhat.com/security/cve/CVE-2021-44228 but there are some opportunities for Imunify360 that we are reviewing at this time. (which is what were looking at in DEFA-4542)

Thanks!

[glenn]

Thanks for your note Eric.