search

Graylog2 / graylog-s3-lambda

An AWS Lambda function that reads logs from S3 and sends them to Graylog
GNU General Public License v3.0
12 stars 6 forks source link

Update log4j to 2.15.0 to mitigate CVE-2021-44228 #26

Closed danotorrey closed 2 years ago

danotorrey commented 2 years ago

Update log4j to version 2.15.0 to mitigate CVE-2021-44228

It is not necessary to set log4j.formatMsgNoLookups=true since version 2.15.0 of log4j automatically defaults the property to false.

This was tested in a sample Lambda function to verify that the logging still works correctly with the updated log4j version.

See for more details

Notes for Reviewers